security assurance specialist

Emirates

Job PurposeAt Emirates, we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers  Fly Better . Emirates Group IT thrives on the dynamic nature of technology. Being pioneers in aviation innovation, we're always at the forefront, pushing boundaries. We're on the lookout for exceptional IT professionals to fortify our position as leaders in the industry. Embark on a journey with the world s largest international airline and become a vital part of our cutting-edge information and technology team as Cybersecurity Assurance Officer.Join our CyberSecurity team where we ensure a world class CyberSecurity organisation based on the key principles of People, Process and Technology underpinned with executive endorsement of a multi-year strategy to continuously improve and develop. The team protects our digital assets by monitoring for threats, responding to incidents, managing vulnerabilities, and ensuring compliance with security policies and regulations. If you are passionate about CyberSecurity, we invite you to apply to play a crucial role in shaping the future of our technology initiatives at Emirates Group.As a Cybersecurity Assurance Officer in the Cyber Assurance team, you will develop, implement, lead and continuously improve the security verification and testing processes consisting of but not limited to risk assessments, compliance reviews, vulnerability assessments and penetration tests based on industry best practices and as defined by the assurance. Collaborate with the team in developing the assurance program on an ongoing basis to incorporate industry best practices and offensive and defensive attack techniques.In This Role You WillDeliver in-depth automated and manual discovery of security vulnerabilities in web applications, mobile applications, web services and client server application and associated infrastructurePerform a thorough verification of the vulnerabilities found during the assessment and associated risk as per risk assessment framework. Support in building defence in depth controls in web &amp; mobile applications.Provide necessary knowledge transfer of the vulnerabilities found during the assessments to the software engineering teams by means of meetings, walkthroughs, technical discussions etc. for implementing appropriate security fixes.Monitor identified security vulnerabilities throughout their life cycle from identification to resolution to verification and closure.Participate in red teaming complex environments with up-to-date knowledge on exploitation and help blue team to build use cases for stronger defence.Participate in evolving the assurance program on an ongoing basis to incorporate industry best practices, newer offensive and defensive attack techniquesCollaborate with development teams on improving security by offering design reviews, threat modelling, awareness, training, new tooling and expert reviewCreate tools, script, and automation to make the vulnerability discovery and vulnerability management process more consistent and efficient.QualificationTo be considered for the role, you must meet the below requirements:Degree or Honours (12+3 or equivalent) Information Technology or relevant.3+ Years of experience information security with related industry recognised certification such as CISSP, CISA, CISM, GIAC certification, CEH, etc.Deep technical knowledge of OWASP TOP 10 issues for both Application &amp; MobileDeep technical knowledge of network and infrastructure security testingTechnical aptitude to test Web Services, API s, business logic issues, cloud specific issues etc.Adaptive to newer attack vectors &amp; technologies and its applicabilityProficient in using &amp; implementing open source and commercial tools for application, mobile &amp; thick client security testingExperience in reviewing source code for varied programming languagesDeep technical knowledge of browser security controls such SOP, CSP, XFO, HSTS, etc.Knowledge of reviewing mobile &amp; web-based security design, implementation &amp; review.Leadership Role: NoSalary &amp; benefitsJoin us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. Find out what it s like to live and work in our fast-paced, cosmopolitan home city in the Dubai Lifestyle section of our website www.emirates.com/careers

Cybersecurity Assurance Officer

Amazon Web Services (AWS...

DescriptionThe Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.The AWS Security Assurance Services (AWS SAS) team works with our largest enterprise customers to address their security and compliance requirements using cloud native technology, while adopting scalable security and risk control measures across their infrastructure. Are you excited by the possibility of using automation and event driven computing to achieve continuous compliance? Do you want to dive deeper into cloud technology, while redefining traditional security measures? Are you interested in applying your assessment and advisory skills to workloads that use emerging technologies in new and interesting ways?At AWS SAS, we are hiring technical security experts with a background in security assessments to lead a variety of customer focused engagements that include architecture and compliance guidance. You will also work with industry and standards bodies to further the creation of security guidance that leverages the advantages of cloud technology. This role will specialize in assessments and advisory work for well-known security frameworks, standards and regulations as well as risk management methodologies.This is a customer facing role where success is measured by developing a high performing team of consultants who help enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. You will be expected to also work in a Business Development capacity, assisting our AWS sellers to position the value and applicability of your team into customer projects and long-term relationships.We are looking for an innovative security and compliance leader who enjoys establishing strategy and then drives consensus across the team to achieve a vision.Key job responsibilitiesExpertise - Lead teams to help partners and customers understand the opportunities for cloud technology to handle security and compliance requirements in key market verticals and regulated industries, such as financial services, healthcare, life sciences, and energy.Solutions   Scope and lead on-site engagements with partners and customers. This includes leading pre-sales on-site visits, understanding customer security and compliance requirements, and proposing and delivering packaged offerings or custom solution engagements.Delivery - Engagements include short on-site projects leading to architecture or compliance roadmaps, architecture guidance, gap assessments, etc. Engagements will include assessments and reporting on various aspects of a customer's security and compliance posture.Insights - Collaborate with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.About The TeamAWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.Basic Qualifications 8+ years of experience in an internal or external IT security audit or compliance assessment role. Candidate must possess at least one of the following security certifications CISSP, CISM, PCI-QSA certifications, or Certified ISO27001 Lead Implementer 8+ years of experience assessing/auditing customers on meeting PCI DSS, ISO 27001, HIPAA, HITRUST, FedRAMP, GDPR, FISMA or NIST/DoD standards. Bachelor s degree in Computer Science, Information Systems Management, Information Security, Business or equivalent experience.Preferred Qualifications Experience building common compliance framework controls as well as mapping between different compliance requirements Experience automating assessments in enterprise or cloud environments Experience assessing security controls for enterprise applications. Demonstrated breadth of security expertise in various sub domains such as encryption, identity, incident response, etc.&nbsp;

AWS Security Assurance Services, Delivery Specialist

Amazon Web Services

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.<br>
The AWS Security Assurance Services (AWS SAS) team works with our largest enterprise customers to address their security and compliance requirements using cloud native technology, while adopting scalable security and risk control measures across their infrastructure. Are you excited by the possibility of using automation and event driven computing to achieve continuous compliance? Do you want to dive deeper into cloud technology, while redefining traditional security measures? Are you interested in applying your assessment and advisory skills to workloads that use emerging technologies in new and interesting ways?<br>
At AWS SAS, we are hiring technical security experts with a background in security assessments to lead a variety of customer focused engagements that include architecture and compliance guidance. You will also work with industry and standards bodies to further the creation of security guidance that leverages the advantages of cloud technology. This role will specialize in assessments and advisory work for well-known security frameworks, standards and regulations as well as risk management methodologies.<br>
This is a customer facing role where success is measured by developing a high performing team of consultants who help enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. You will be expected to also work in a Business Development capacity, assisting our AWS sellers to position the value and applicability of your team into customer projects and long-term relationships.
<br>
We are looking for an innovative security and compliance leader who enjoys establishing strategy and then drives consensus across the team to achieve a vision.<br>
<br>
Key job responsibilities<br>
Expertise - Lead teams to help partners and customers understand the opportunities for cloud technology to handle security and compliance requirements in key market verticals and regulated industries, such as financial services, healthcare, life sciences, and energy.<br>
Solutions &ndash; Scope and lead on-site engagements with partners and customers. This includes leading pre-sales on-site visits, understanding customer security and compliance requirements, and proposing and delivering packaged offerings or custom solution engagements.<br>
Delivery - Engagements include short on-site projects leading to architecture or compliance roadmaps, architecture guidance, gap assessments, etc. Engagements will include assessments and reporting on various aspects of a customer's security and compliance posture.<br>
Insights - Collaborate with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.<br>
<br>
About the team<br>
AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You&rsquo;ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>8+ years of experience in an internal or external IT security audit or compliance assessment role.</li><li>Candidate must possess at least one of the following security certifications CISSP, CISM, PCI-QSA certifications, or Certified ISO27001 Lead Implementer</li><li>8+ years of experience assessing/auditing customers on meeting PCI DSS, ISO 27001, HIPAA, HITRUST, FedRAMP, GDPR, FISMA or NIST/DoD standards.</li><li>Bachelor&rsquo;s degree in Computer Science, Information Systems Management, Information Security, Business or equivalent experience.</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Experience building common compliance framework controls as well as mapping between different compliance requirements</li><li>Experience automating assessments in enterprise or cloud environments</li><li>Experience assessing security controls for enterprise applications.</li><li>Demonstrated breadth of security expertise in various sub domains such as encryption, identity, incident response, etc.</li><li>Hands-on technical expertise in technology automation, implementation, integration, and/or deployment</li><li>Demonstrated ability to think strategically about business, product, and technical challenges</li><li>Experience with risk assessment methodologies and risk reporting for executive leadership</li><li>Proven background in clearly writing complex technical documents that can be presented across a varied enterprise corporate audience</li></ul><br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.</div>

AWS Security Assurance Services, Delivery Specialist, UAE, AWS Security Assurance Services

Canonical

<p>Join to apply for the <b>Security Risk Management Specialist</b> role at <b>Canonical</b>.</p> <p>In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do. To support this we use industry best practices paired with emerging threat information to promote risk identification, quantification, impact analysis, and modelling to drive decision making. In this role you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will work within the team and cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. The team collaborates with our Organisational Learning and Development team to develop playbooks and security training across Canonical.</p> <p>The security risk management team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They may share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.</p> What you will do in this role <ul> <li>Define Canonical's security risk management standards and playbooks</li> <li>Analyse and improve Canonical's security risk practices</li> <li>Evaluate, select and implement new security requirements, tools and practices</li> <li>Grow the presence and thought leadership of Canonical security risk management practice</li> <li>Develop Canonical security risk learning and development materials</li> <li>Work with Security leadership to present information and influence change</li> <li>Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs</li> <li>Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)</li> <li>Participate in risk management, decision-making, and collaborative discussions</li> <li>Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes</li> <li>Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action</li> <li>Develop templates and materials to help with self-service risk management actions</li> <li>Monitor and identify opportunities to improve the effectiveness of risk management processes</li> <li>Launch campaigns to perform security assessments and help mitigate security risks across the company</li> <li>Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities</li> </ul> What we are looking for <ul> <li>An exceptional academic track record</li> <li>Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path</li> <li>Drive and a track record of going above-and-beyond expectations</li> <li>Deep personal motivation to be at the forefront of technology security</li> <li>Leadership and management ability</li> <li>Excellent business English writing and presentation skills</li> <li>Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management</li> <li>Expertise in threat modelling and risk management frameworks</li> <li>Broad knowledge of how to operationalize the management of security risk</li> <li>Experience in Secure Development Lifecycle and Security by Design methodology</li> </ul> What we offer you <ul> <li>Distributed work environment with twice-yearly team sprints in person</li> <li>Personal learning and development budget of USD 2,000 per year</li> <li>Annual compensation review</li> <li>Recognition rewards</li> <li>Annual holiday leave</li> <li>Maternity and paternity leave</li> <li>Employee Assistance Programme</li> <li>Opportunity to travel to new locations to meet colleagues</li> <li>Priority Pass, and travel upgrades for long haul company events</li> </ul> About Canonical <p>Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world. Canonical has been a remote-first company since its inception in 2004. Working here challenges you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer.</p> <p>We recruit on a global basis and set a very high standard for people joining the company. We expect excellence. Whatever your identity, we will give your application fair consideration.</p> Seniority level <ul> <li>Entry level</li> </ul> Employment type <ul> <li>Full-time</li> </ul> Job function <ul> <li>Finance and Sales</li> </ul> Industries <ul> <li>Software Development</li> </ul><img src="https://www.jobg8.com/Tracking.aspx?FQXNT6u9OH1JNAkpVNhcnuMRGR%2fAp5PJl" width="0" height="0" />

Security Risk Management Specialist

AL GHAITH TECHNICAL SERVICES

<p>Penetration Tester / Vulnerability Analyst &ndash; LLM Security Focus</p><p>Role Overview:</p><p>We&rsquo;re looking for a skilled Pen Tester &amp; VA Specialist with experience in AI / LLM system testing. You&rsquo;ll perform security assessments across web, API, cloud, and AI environments &mdash; focusing on prompt injection, guardrail bypass, model extraction, and Zero-Trust validation for enterprise and government clients.</p><p>Key Responsibilities:</p><p>Conduct web, API, and infrastructure vulnerability assessments &amp; penetration tests.</p><p>Test LLM applications for prompt injection, data leakage, and model theft.</p><p>Use tools like Burp Suite, Trivy, PromptFoo, Garak, NeMo Guardrails, Presidio.</p><p>Produce technical reports and recommend mitigations aligned with ISO 27001 / PDPL.</p><p>Collaborate with DevOps and SOC teams for continuous assurance.</p><p>Qualifications:</p><p>3&ndash;5 yrs in PenTesting / VA or AI Security.</p><p>Strong knowledge of OWASP LLM Top 10, CVSS, MITRE ATT&amp;CK.</p><p>Preferred: OSCP / CEH / AI Security certifications.</p><p>Scripting in Python / Bash is a plus.</p><p>Job Type: Full-time</p>

Cyber security engineer

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>16 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div><div><p>
Join our dedicated Cyber Assurance Team within the Information Risk Management Department. Reporting to the Cyber Assurance Lead, you will play a critical role in strengthening our organization's security posture.</p>
<p>
The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><ul><li>Contribute to the implementation and continuous improvement of the organization's overall cyber strategy, ensuring the protection of information systems and data against cyber threats and vulnerabilities. Support the Cyber Assurance Lead in monitoring, enhancing, and maintaining the cyber assurance program within QatarEnergy LNG&rsquo;s Information Security organization.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s)</b></h2>
</div><div><ul><li>Major challenges are,
<br>
(1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
<br>
(2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
<br>
(3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
<br>
(4) keeping up to date with IT and OT Information Security and developments.
<br>
(5) keeping up to date with IT and OT Information Security regulatory requirements.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Adversary emulation: Plan and execute full-scope red team engagements that mimic real-world threat actors, including initial access, privilege escalation, and lateral movement.</li>
<li>Phishing campaigns: Conduct advanced social engineering and targeted phishing campaigns that bypass modern email gateways.</li>
<li>Technical assessments: Perform thorough assessments of complex production environments, including network infrastructure, cloud services, and applications.</li>
<li>Malware development and EDR bypass: Develop custom malware, exploits, and post-exploitation tools designed to evade detection by Endpoint Detection and Response (EDR) and other security controls.</li>
<li>C2 infrastructure management: Deploy, manage, and operate command-and-control (C2) frameworks such as Cobalt Strike, Brute Ratel C4, and Nighthawk C2.</li>
<li>Operational security (OpSec): Maintain strict OpSec discipline to ensure all red team activities remain covert and undetected by defensive teams.</li>
<li>Research and development (R&amp;D): Conduct offensive security research to stay current with the latest tactics, techniques, and procedures (TTPs) and develop new tools and methodologies.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - II</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree level in information security, computer science or engineering.</li>
<li>Professional certifications in information security management and standards (e.g., OSCP, OSCE, CRTP, CRTO, CRTL, etc.).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience - I</b></h2>
</div><div><ul><li>8+ years of experience in <b>Offensive Security / Red Teaming</b></li>
<li>Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.</li>
<li>Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization&rsquo;s management and a good understanding of the principles of management and control.</li>
<li>Possesses good understanding of and practices according to a professional code of conduct and code of ethics.</li>
<li>Possesses a good understanding of IT/OT business applications.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills - I</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.</li>
<li>Builds a good rapport and strategic relations with the OT OEM community and with the QatarEnergy LNG operation leads.</li>
<li>Ability to deal effectively with stakeholders at all levels.</li>
<li>Demonstrates integrity, objectivity and impartiality.</li>
<li>Analytical skills.</li>
<li>Applies pragmatic judgement in the application of rules.</li></ul></div></div></div></div></div><p></p>

Cyber Assurance Specialist

<div></div><div><p><b>Job Posting Date: </b>16 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div><div><p>
Join our dedicated Cyber Assurance Team within the Information Risk Management Department. Reporting to the Cyber Assurance Lead, you will play a critical role in strengthening our organization's security posture.</p>
<p>
The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><ul><li>Contribute to the effectiveness of the organization&rsquo;s cyber defence by identifying risks, evaluating controls, and supporting the protection of information systems and data from cyber threats and vulnerabilities. Deliver and enhance key components of the cyber assurance program within QatarEnergy LNG&rsquo;s Information Security organization.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s) - I</b></h2>
</div><div><ul><li>Major challenges:
<br>
(1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
<br>
(2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
<br>
(3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
<br>
(4) keeping up to date with IT and OT Information Security and developments.
<br>
(5) keeping up to date with IT and OT Information Security regulatory requirements.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Develop Attack Scenarios: Based on CTI and threat actor Tactics, Techniques, and Procedures (TTPs), create realistic and impactful threat simulation scenarios.</li>
<li>Configure and Deploy Security Tools: Set up, configure, and run automated security scanning tools, such as vulnerability scanners and web application security scanners.</li>
<li>Analyze Scan Results: Interpret findings from automated scans to identify potential vulnerabilities and weaknesses that could be exploited in a simulation.</li>
<li>Perform Phishing Simulations: Design, execute, and analyze targeted phishing campaigns to test the human element of security and measure employee awareness.</li>
<li>Collaborate for Defense Improvement: Work with blue teams to share insights on attack methodologies, improve detection capabilities, and enhance overall security posture.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree level in information security, computer science or engineering.</li>
<li>Professional certifications in information security management and standards (e.g., OSCP, CRTP, CRTO, OSWE, etc.)</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience - I</b></h2>
</div><div><ul><li>5+ years of experience in <b>Offensive Security / Red Teaming
</b></li><li>Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.</li>
<li>Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization&rsquo;s management and a good understanding of the principles of management and control.</li>
<li>Possesses good understanding of and practices according to a professional code of conduct and code of ethics.</li>
<li>Possesses a good understanding of IT/OT business applications.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills - I</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.</li>
<li>Builds a good rapport and strategic relations with the OT OEM community and QatarEnergy LNG Operation Leads.</li>
<li>Ability to deal effectively with stakeholders at all levels.</li>
<li>Demonstrates integrity, objectivity and impartiality.</li>
<li>Analytical skills.</li>
<li>Applies pragmatic judgement in the application of rules.</li></ul></div></div></div></div></div><p></p>

Senior Analyst Cyber Assurance

Search 10000+ Security assurance specialist jobs near you this October. New roles added regularly across leading industries. Apply today.