Senior Cyber Security Analyst – Qatar Airways, Doha

Qatar Airways is recruiting a Senior Cyber Security Analyst for its Continuous Security Testing department in Doha, and this is one of the most hands-on cyber security analyst jobs in doha for offensive security specialists. The role carries out penetration testing and vulnerability assessments that uncover weaknesses and reduce cyber risk across the airline’s technology estate. Findings are turned into practical fixes, which are then checked again once the responsible teams have applied them. Applications close on Tuesday 17 November 2026, and the official reference for this vacancy is 237034.

All testing is authorised work carried out inside an agreed scope and rules of engagement. The analyst works with system owners and other stakeholders across technology and the wider business. Evidence from each assessment is handled carefully and supports the airline’s security and compliance reporting.

About the Role

This position sits within the Corporate and Commercial job family and is based in Doha, Qatar. The Continuous Security Testing team examines a wide range of systems, from internet-facing services to internal infrastructure. For testers comparing cyber security analyst jobs in doha, the variety of the estate is a major part of the appeal.

The scope described in the posting covers external black-box testing, enterprise cloud platforms, internal infrastructure and enterprise directory services. It also includes Wi-Fi networks, operational technology, kiosks, servers and network devices. Few single roles touch so many different environments.

The analyst does not simply list vulnerabilities. Each validated finding is documented with its business impact, together with remediation advice that is prioritised by risk. Corrective actions are then validated with the technology and business teams who own the systems.

The department’s work is continuous rather than occasional, because new systems, configuration changes and fresh threats appear all the time. That steady testing cycle gives cyber security analyst jobs in doha in this team a depth that one-off project work cannot match. Testers see systems again after fixes, so they learn which remediation approaches actually hold.

Reporting is a serious part of the job. Each engagement produces technical reports for the teams who must fix the issues and management summaries for decision-makers. Both formats draw on the same evidence, presented at the right level of detail for the audience.

Key Responsibilities

The main duties attached to cyber security analyst jobs in doha in this department include the following:

• Planning and delivering authorised security assessments within the agreed scope, rules of engagement and testing schedules.
• Documenting validated findings, assessing their business impact and recommending practical, risk-prioritised remediation to both technical and non-technical stakeholders.
• Coordinating testing with system owners, protecting assessment evidence and supporting security and compliance reporting through established procedures.
• Carrying out external black-box penetration testing of internet-facing assets, and internal penetration testing that includes controlled exploitation of enterprise directory services.
• Performing cloud penetration testing and security assessments across enterprise cloud platforms, covering infrastructure, configurations and access controls.
• Assessing Wi-Fi configuration, authentication, access controls and network segregation, and examining kiosk setups for exposure to unauthorised access.
• Conducting security and vulnerability assessments of in-scope operational technology systems, including SCADA and industrial control systems, using approved methods that put operational safety and availability first.
• Running vulnerability assessments across on-premises servers, cloud infrastructure, external IP addresses, network devices and approved OT networks, using enterprise tools such as Tenable and Qualys.
• Planning and executing vulnerability scans, reviewing coverage, analysing results and manually validating findings to reduce false positives.
• Prioritising vulnerabilities by severity, asset criticality, exposure and business impact, then agreeing remediation with asset owners, tracking progress, retesting and documenting closure evidence or remaining risk.
• Producing technical reports and management summaries that set out the scope, evidence, business impact and remediation recommendations.
• Continuously improving testing practices and reporting, and sharing technical knowledge within the team.

Approved, industry-standard testing tools are used so that assessments can be repeated consistently. Assessment plans and testing records are maintained for every engagement. That discipline helps the team show exactly what was tested and what changed afterwards.

Judgement is essential throughout. The analyst must choose suitable testing methods and validate findings carefully, without ever exceeding the authorised scope of an assessment. Work on operational technology in particular demands restraint, because testing must never put live operations at risk.

Requirements

Qatar Airways sets a detailed standard for cyber security analyst jobs in doha at this senior level. The essential requirements are:

• A bachelor’s degree in cyber security, information technology, computer science or a related field.
• A minimum of four years of job-related experience.
• Proven experience of external black-box and internal infrastructure penetration testing.
• Hands-on experience of Active Directory security assessment and testing.
• Experience of cloud security assessments and penetration testing on enterprise cloud platforms.
• Experience with enterprise vulnerability management tools such as Tenable or Qualys, including scanning, analysis and remediation tracking.
• Skill in defining assessment scope, following rules of engagement and coordinating with system owners.
• Evidence-based technical reporting that explains business impact and practical remediation clearly.
• Strong knowledge of network security, enterprise operating systems, directory services and cloud security, with clear written and verbal communication.

Preferred experience includes aviation cyber security frameworks, security assessments across large and geographically dispersed technology environments, and hands-on OT assessment experience with SCADA or industrial control systems. Preferred certifications include OSCP or OSCP+, OSEP, CRTO, CRTL and CARTP, with one or more of these being an advantage. The posting states no nationality restriction.

Beyond the formal requirements, the role calls for strong analytical judgement and close attention to detail. Knowledge of wireless security, kiosk restrictions and infrastructure hardening is expected, together with awareness of OT assessment methods. The analyst also handles confidential information in a disciplined way, and coordinates calmly with infrastructure, network and cloud teams while remediation is agreed and validated.

Why This Role Stands Out

The breadth of the testing scope is unusual. External and internal penetration testing, cloud assessments, Wi-Fi reviews, kiosk checks and OT security all sit in one position, which is rare among cyber security analyst jobs in doha. Testers who want to keep developing across several disciplines will find plenty to work on.

The role is also focused on outcomes rather than scan output. Findings must be validated, prioritised by real business risk and followed through to remediation and retesting. That end-to-end responsibility makes this one of the more complete cyber security analyst jobs in doha for experienced testers.

Working for a large international airline adds further scale, with systems spread across many locations. Security work here protects operations that run around the clock. Anyone shortlisting cyber security analyst jobs in doha should weigh that scale and variety carefully before the deadline.

There is room to grow the practice itself, not just to run tests. The analyst is expected to keep improving testing methods and reporting quality, and to share technical knowledge with colleagues in the team. That combination of delivery and improvement suits testers who want their experience to shape how a testing function develops.

The closing date is close, so an early application is sensible. Candidates who meet the essential experience should apply without waiting until the final day.

How to Apply for Cyber Security Analyst Jobs in Doha

If you are ready to apply for cyber security analyst jobs in doha at this level, applications are made only through the official Qatar Airways careers system. Use the apply link here: Apply on the official Qatar Airways careers website (Ref 237034). Complete the online application before Tuesday 17 November 2026, as the posting closes on that date.

If this role is not the right fit, you can browse more verified vacancies on our All Jobs page, where new Gulf roles are added regularly. Every listing there links back to the employer’s own application page.

Related Jobs

You may also be interested in these similar verified roles:

• Security Coordinator (Technology & Projects) – Emirates Group Security
• GS Projects Specialist – Qatar Airways
• Head of Cargo Safety, Quality and Compliance – Qatar Airways Cargo

GulfCareers.ae is not the employer and never charges applicants a fee. Apply only through the official employer link in this post.