403 Ethical Hackers jobs in Bahrain

• Perform comprehensive penetration testing and vulnerability assessments on internal and external systems, applications, and networks.
• Simulate advanced persistent threats (APTs) and other attack vectors to identify security weaknesses.
• Conduct security code reviews and provide detailed feedback to development teams.
• Develop and maintain custom scripts and tools to automate penetration testing processes.
• Analyze test results, document findings, and create detailed, actionable reports for technical and non-technical audiences.
• Collaborate with IT and development teams to prioritize and track the remediation of identified vulnerabilities.
• Stay current with the latest security threats, vulnerabilities, and penetration testing techniques.
• Contribute to the development and improvement of security policies, procedures, and best practices.
• Participate in incident response activities when necessary.
• Mentor junior security analysts and share knowledge across the team.

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 5+ years of hands-on experience in penetration testing and vulnerability assessment.
• Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and attack methodologies.
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, Wireshark, etc.
• Experience with scripting languages like Python, Bash, or PowerShell.
• Strong knowledge of network protocols, operating systems (Windows, Linux), and web technologies.
• Relevant security certifications such as OSCP, CISSP, CEH, or GWAPT are highly desirable.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively both independently and as part of a collaborative team in a hybrid environment.

This role will be responsible for handling the implementation and maintenance of GFG and subsidiaries Information Security Management System in accordance with local laws, regulations and best practices.

1. Support Head Information Security in defining and implementation of information security governance documentation including policies, manual, SOPs and guidelines.
2. Support Head Information Security in conducting Risk-based Assessment of Information Security policies and operating procedures owned by other departments within the group against industry-recognized security standards and best practices, ensuring adequate preventive, detective and corrective controls to provide data integrity, confidentiality and availability.
3. Support Head Information Security in conducting analysis of security requirements and controls to identify gaps and provides recommendations of industry best practices, trends, and technology products.
4. Support Head Information Security in conducting on annual basis and continuous basis Information Security Risk Assessment, identify business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement.
5. Develop and maintain information register and ensure that the information is classified by data owners and protected in accordance with the information classification framework.
6. Conducting awareness sessions to the new and existing employees on information security policies and global trends as per the awareness program.
7. Support in defining information security requirements in information systems, projects and third parties in cooperation with the delivery departments i.e. ICT, and FM.
8. Support in conducting incident investigation for information security incidents and ensuring that the necessary actions and disciplinary actions are taken.
9. Support in defining information security requirements to be included in ICT Disaster recovery plans to ensure continuity of information security controls during disasters.
10. Support in conducting internal and external audits to ensure that BAC Information Security Management system complies with best practices and local regulations.
11. Improve the maturity of the information security management system through suggesting and supporting in the implementation of technologies such as DLP solutions, GRC solutions etc.

Bachelor’s degree in information technology.

Certified Information Security Auditor (CISA) (Preferred)

3+ years of Information Security experience

1. Proven ability to establish and manage “dotted-line” business relationships to deliver agreed outcomes/deliverables.
2. Ability to work effectively with all levels of personnel across the organization.
3. Proven ability to communicate clearly and appropriately based on audience with excellent facilitation and customer service skills.
4. Excellent written and verbal communications, critical thinking skills, effective interpersonal skills, strong formal presentation abilities.
5. Ability to be flexible and work effectively with ambiguity and change.

• Develop and implement information security policies, standards, and procedures.
• Manage and oversee the organization's security operations center (SOC).
• Conduct regular risk assessments and vulnerability analyses.
• Lead incident response activities and manage security breaches.
• Oversee the deployment and management of security technologies.
• Develop and deliver security awareness training programs for employees.
• Ensure compliance with relevant security regulations and standards.
• Manage security audits and penetration testing engagements.
• Supervise and mentor the information security team.
• Collaborate with IT and business units to integrate security into all aspects of the organization.

• Bachelor's degree in Computer Science, Information Technology, or a related field. Master's degree preferred.
• Minimum of 6 years of experience in information security management.
• In-depth knowledge of cybersecurity principles, threats, and countermeasures.
• Experience with security frameworks such as ISO 27001 and NIST.
• Proven experience in incident response and risk management.
• Excellent leadership, team management, and communication skills.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
• Experience with security tools like SIEM, firewalls, and IDS/IPS.
• Strong analytical and problem-solving abilities.