Job Description – Offensive Cybersecurity Expert (Qatar)

Position: Offensive Cybersecurity Specialist

Location: Qatar

Role Overview

We are seeking a highly skilled Offensive Cybersecurity Specialist. This role focuses on conducting offensive cyber assessments, penetration testing, red-team exercises, and vulnerability management across the bank’s IT applications and infrastructure. The incumbent will ensure compliance with IT Security Policies and Standards, strengthen security posture, and collaborate with internal and external stakeholders.

This is a hands-on, technical role requiring an ethical hacking mindset combined with strong analytical, communication, and reporting skills.

Key Responsibilities

1. Perform penetration testing and vulnerability scanning of IT applications, systems, and infrastructure.
2. Strong knowledge of penetration testing tools, red-team methodologies, and vulnerability scanning frameworks.
3. Experience with DevSecOps, cloud-native security, container orchestration (Kubernetes), and Active Directory security.
4. Conduct red team and simulated offensive attack exercises to test resilience.
5. Manage vendor relationships for external penetration testing engagements.
6. Assess system and application security against IT Security Policies and international standards.
7. Provide subject matter expertise for IT security reviews, architecture assessments, and compliance evaluations.
8. Work closely with IT and business teams to identify gaps, propose remediation, and improve security posture.
9. Support regulatory, audit, and compliance requirements with accurate reporting.
10. Stay updated on the latest cyber threats, vulnerabilities, and mitigation techniques.

Education & Experience:

1. Bachelor’s degree in IT, Cybersecurity, or related field (Master’s preferred).
2. Minimum 4 years of experience in offensive security assessments within banking or Big 4 consultancy.
3. Strong experience in penetration testing, vulnerability scanning, and technical risk assessments.
4. Exposure to red-team activities highly desirable.
5. Mandatory certifications: CISSP, CISM, or CISA.
6. Excellent written and verbal communication in English and Arabic.