Senior Analyst Cyber Assurance

Qatarenergy

The Cyber Assurance team is responsible for proactively assessing and enhancing our security defenses. This involves conducting comprehensive ethical hacking activities and adversary simulations to identify potential vulnerabilities and control gaps. Your expertise will be vital in providing actionable recommendations to fortify our systems and ensure the resilience of our digital assets.

Job Purpose

• Contribute to the effectiveness of the organization s cyber defence by identifying risks, evaluating controls, and supporting the protection of information systems and data from cyber threats and vulnerabilities. Deliver and enhance key components of the cyber assurance program within QatarEnergy LNG s Information Security organization.

Job Context & Major Challenge(s) - I

• Major challenges:
  (1) requires deep understanding of ethical hacking, penetration testing methodologies and offensive cybersecurity tactics
  (2) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation
  (3) contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level
  (4) keeping up to date with IT and OT Information Security and developments.
  (5) keeping up to date with IT and OT Information Security regulatory requirements.

Key Job Accountabilities - I

• Develop Attack Scenarios: Based on CTI and threat actor Tactics, Techniques, and Procedures (TTPs), create realistic and impactful threat simulation scenarios.
• Configure and Deploy Security Tools: Set up, configure, and run automated security scanning tools, such as vulnerability scanners and web application security scanners.
• Analyze Scan Results: Interpret findings from automated scans to identify potential vulnerabilities and weaknesses that could be exploited in a simulation.
• Perform Phishing Simulations: Design, execute, and analyze targeted phishing campaigns to test the human element of security and measure employee awareness.
• Collaborate for Defense Improvement: Work with blue teams to share insights on attack methodologies, improve detection capabilities, and enhance overall security posture.