Senior Cybersecurity Engineer – Infrastructure Security & VAPT

About the role

Al-Qutaibi Islamic Bank is looking for a senior‑level cybersecurity professional to protect its infrastructure and lead vulnerability assessment and penetration testing (VAPT) activities. This is a hands‑on engineering position focused on securing networks, systems, web applications and APIs.

Key responsibilities

• Administer, secure, review and optimise FortiGate firewalls in production, including policies, NAT, IPsec/SSL VPN, network segmentation, IDS/IPS, application control, web filtering and security profiles.
• Perform regular security reviews, hardening and vulnerability assessments across servers, networks, endpoints, web applications, APIs and internet‑facing systems.
• Manage the full vulnerability lifecycle: discovery, validation, prioritisation, remediation and retesting using tools such as Tenable/Nessus, Qualys or OpenVAS.
• Validate findings manually to eliminate false positives and verify remediation effectiveness.
• Conduct practical penetration testing of networks, web applications and APIs using Nmap, Burp Suite, Metasploit and related tools.
• Assess and harden Active Directory and Windows Server environments.
• Review and strengthen Web Application Firewall configurations and address OWASP Top 10 and API security issues.

Required profile

• Minimum 4 years of hands‑on professional cybersecurity experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a related technical field.
• Fortinet NSE 4 FortiOS Administrator certification or higher.

Required skills

• FortiGate firewall administration.
• Vulnerability management with Tenable/Nessus, Qualys or OpenVAS.
• Penetration testing using Nmap, Burp Suite and Metasploit.
• Active Directory and Windows Server security hardening.
• Web Application Firewall configuration.
• Knowledge of OWASP Top 10 and OWASP API Security.