📍 Location: Doha, Qatar · Full-Time

We are looking for an experienced VAPT Manager to lead and manage Vulnerability Assessment and Penetration Testing activities across applications, infrastructure, networks, cloud environments, APIs, and other technology platforms.

Key Responsibilities

• Manage end-to-end VAPT activities across applications, networks, infrastructure, APIs, cloud, and other platforms.

• Coordinate with cybersecurity, IT, business teams, and external vendors.

• Review and validate VAPT reports, vulnerabilities, risks, and remediation recommendations.

• Prioritize vulnerabilities based on severity, business impact, exploitability, and risk.

• Track remediation activities, follow-up validation, and closure of findings.

• Prepare management-level reporting on VAPT status, risks, vulnerabilities, and remediation progress.

• Establish VAPT schedules, scope, methodologies, and engagement plans.

• Manage third-party penetration testing and cybersecurity vendors.

• Ensure VAPT activities align with security policies, industry standards, and regulatory requirements.

• Support internal and external audits with relevant VAPT documentation and evidence.

• Continuously improve vulnerability management and penetration testing processes.

• Stay updated on emerging vulnerabilities, attack techniques, and cybersecurity best practices.

Required Experience & Skills

• 7+ years of experience in cybersecurity, information security, vulnerability management, penetration testing, or related areas.

• Proven experience managing VAPT programs and security testing engagements.

• Strong knowledge of network, web application, API, mobile, cloud, and infrastructure security.

• Experience in vulnerability assessment, penetration testing, risk assessment, remediation tracking, and security reporting.

• Strong knowledge of OWASP, CVSS, and common vulnerability and exploitation techniques.

• Strong stakeholder management, communication, analytical, and reporting skills.

• Ability to translate technical security findings into clear business risks for senior management.

Qualification

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.

Certification

• OSCP – Offensive Security Certified Professional is mandatory.

Key Deliverables / KPIs

• Timely completion of scheduled VAPT engagements.

• Reduction and timely remediation of critical and high-risk vulnerabilities.

• Accurate and timely management reporting.

• Successful vulnerability retesting and closure validation.

• Compliance with applicable cybersecurity policies, standards, and regulatory requirements.