Security Operations Officer – Security Assessment & Assurance - QAR

Security Operations Officer – Security Assessment & Assurance

Department: Information Security

Level: Senior

Salary: Up to 30,000 QAR

An opportunity for an experienced Security Assurance professional responsible for leading enterprise security assessments across applications, infrastructure, cloud environments, identity platforms, and third-party services.

The successful candidate will validate security controls, drive continuous security improvement, define secure configuration standards, and ensure security is embedded throughout technology delivery.

• Lead enterprise security assessments across technology platforms.
• Perform architecture reviews, vulnerability assessments, and security control validation.
• Develop and maintain a structured security assurance framework.
• Track remediation activities from identification through validation.
• Present technical findings in clear business risk terms.
• Assess web applications, APIs, mobile platforms, cloud environments, infrastructure, and container technologies.
• Identify authentication weaknesses, privilege escalation risks, business logic flaws, and other advanced attack vectors.
• Validate secure architectures and cloud security controls.
• Support Secure SDLC and Dev Sec Ops  initiatives.
• Operating systems
• Network infrastructure
• Databases
• Identity platforms
• Security technologies
• Align hardening standards with recognised industry best practices.
• Implement continuous configuration compliance monitoring.
• Detect configuration drift and coordinate remediation with engineering teams.

• Conduct security design and architecture reviews.
• Perform threat modelling exercises.
• Ensure solutions align with enterprise security architecture and Zero Trust principles.

• Assess third-party suppliers and externally hosted services.
• Validate encryption, data protection, and privacy controls.
• Support resilience testing, red team exercises, and incident response simulations.
• Participate in security reviews of operational technology environments where applicable.

• Support security audits and compliance activities.
• Produce security metrics, KPIs, and executive reporting.
• Ensure continued alignment with recognised security frameworks and standards.

• 8+ years of Information Security experience.
• Extensive experience performing security assessments and assurance activities.
• Strong knowledge of application, cloud, infrastructure, and identity security.
• Hands‑on experience with vulnerability management and security architecture reviews.
• Experience implementing secure configuration baselines and system hardening.
• Excellent communication skills with both technical and business stakeholders.

• Security assessments
• Application Security
• API Security
• Vulnerability Management
• Penetration Testing
• Security Architecture
• Dev Sec Ops
• Secure Configuration Management
• Identity & Access Management
• Third-Party Risk Assessment

• Offensive Security certifications
• CISSP
• Cloud Security certifications
• Industrial Cyber Security certifications (desirable)