Senior Analyst Cyber Assurance

Job Specification

Job Purpose

• Contribute to the effectiveness of the organization’s cyber defence by identifying risks, evaluating controls, and supporting the protection of information systems and data from cyber threats and vulnerabilities. Deliver and enhance key components of the cyber assurance program within QatarEnergy LNG’s Information Security organization.

Job Context & Major Challenge(s) Major challenges

Key Job Accountabilities

• Develop Attack Scenarios: Based on CTI and threat actor Tactics, Techniques, and Procedures (TTPs), create realistic and impactful threat simulation scenarios.
• Configure and Deploy Security Tools: Set up, configure, and run automated security scanning tools, such as vulnerability scanners and web application security scanners.
• Analyze Scan Results: Interpret findings from automated scans to identify potential vulnerabilities and weaknesses that could be exploited in a simulation.
• Perform Phishing Simulations: Design, execute, and analyze targeted phishing campaigns to test the human element of security and measure employee awareness.
• Collaborate for Defense Improvement: Work with blue teams to share insights on attack methodologies, improve detection capabilities, and enhance overall security posture.

Qualifications

• Bachelor’s degree level in information security, computer science or engineering.
• Professional certifications in information security management and standards (e.g., OSCP, CRTP, CRTO, OSWE, etc.)
• Knowledge and/or Experience
• 5+ years of experience in

Offensive Security / Red Teaming

• Broad knowledge of current techniques and practices associated with development and service provision and is a recognized specialist in at least one area.
• Understands the main strategic and commercial issues facing IT and safety and availability expectations from OT and the Organization’s management and a good understanding of the principles of management and control.
• Possesses good understanding of and practices according to a professional code of conduct and code of ethics.
• Possesses a good understanding of IT/OT business applications.

Technical and Business Skills

• Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.
• Builds a good rapport and strategic relations with the OT OEM community and QatarEnergy LNG Operation Leads.
• Ability to deal effectively with stakeholders at all levels.
• Demonstrates integrity, objectivity and impartiality.
• Analytical skills.
• Applies pragmatic judgement in the application of rules.