Security Assessment & Assurance Specialist - QAR

Position: Security Assessment & Assurance Specialist - Up to 30,000 QAR

Security Assessment & Assurance Specialist – Up to 30,000 QAR

An enterprise organisation is seeking a senior Security Assessment & Assurance Specialist to strengthen its security posture across IT, cloud, and operational technology (OT) environments
.

This role focuses on security configuration assessments, penetration testing, risk identification, vulnerability management, and assurance reporting
, working closely with infrastructure, application, and platform teams.

Key Responsibilities Security Configuration & Hardening

• Perform detailed security configuration assessments across IT, cloud, and OT environments aligned to recognised benchmarks and internal standards.
• Review firewall policies and network security controls to ensure least-privilege access, segmentation, and policy compliance
  .
• Assess security configurations of network infrastructure components, including routers, switches, load balancers, and secure access platforms
  .
• Validate operating system and application hardening
  , patching status, and configuration baselines.
• Evaluate Network Access Control (NAC) effectiveness and enforcement coverage.
• Review secure access platforms (e.g., SSE/SASE) to ensure consistent access control and data protection.
• Recommend practical hardening measures to reduce attack surface and improve resilience.

Technical Risk & Testing

• Identify and assess technical security risks across enterprise, cloud, and industrial environments
  .
• Conduct or coordinate penetration testing for cloud workloads, web applications, APIs, and internal infrastructure.
• Perform container and Kubernetes security assessments
  .
• Analyse findings from vulnerability scans, penetration tests, and configuration reviews, mapping them to operational and business risk.
• Support or conduct red-team and adversary simulation exercises to validate detection and response capabilities.
• Contribute to structured risk documentation and management reporting.

Vulnerability & Remediation Management

• Track, prioritise, and manage vulnerabilities across IT, OT, and cloud platforms
  .
• Apply risk-based prioritisation considering exploitability, exposure, and business impact.
• Coordinate remediation efforts with infrastructure, application, cloud, and OT teams.
• Validate remediation actions and maintain dashboards showing risk trends and remediation metrics
  .

Security Assurance & Reporting

• Develop and maintain security assurance activities across multiple technology domains.
• Track KPIs and KRIs to measure effectiveness of security controls.
• Conduct periodic control and compliance reviews against agreed baselines.
• Identify gaps, document deviations, and support remediation through cross-team collaboration.
• Produce clear, high-quality reports for both technical and executive stakeholders
  .

Experience & Qualifications Required Experience

• 8+ years of hands-on experience in security assessment, penetration testing, and security assurance
  .
• Proven experience delivering both manual and automated penetration testing
  , including adversary simulation exercises.
• Strong understanding of security configuration benchmarks and risk assessment methodologies
  .
• Hands-on experience assessing network security controls, OS/application hardening, and OT/ICS environments
  .
• Solid expertise in public cloud security
  , particularly across enterprise-scale environments.

Technical Skills

• Proficiency with common security testing and assessment tools (e.g., web testing, network scanning, vulnerability management).
• Experience with cloud-native security services and posture management platforms
  .
• Strong understanding of container and Kubernetes security
  .
• Knowledge of zero-trust principles, network segmentation, and firewall configuration auditing
  .
• Familiarity with OT and industrial security principles is highly valued.

Governance & Frameworks

• Working knowledge of recognised security and risk frameworks (e.g., ISO, NIST, industrial security standards).
• Experience translating technical findings into clear business risk and remediation guidance
  .

Education

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.

Certifications (one or more preferred)

• Senior security or offensive security certifications
• Cloud security certifications
• Industrial or OT security certifications are advantageous

#J-18808-Ljbffr