GF2073 - ANALYST – CYBER SECURITY

Gulf Air Group
Bahrain
Workplace: OnsiteFull timeFunction: Cybersecurity0Education: bachelorsSkills: ["Collaboration","Incident response","Forensic investigation","Risk assessment","Threat modeling"]

Support the implementation and continuous enhancement of cyber security controls across applications, cloud infrastructure, DevOps pipelines, and operational environments. You will automate security testing in CI/CD (SAST/DAST/SCA), monitor and triage cloud and endpoint security alerts, validate infrastructure-as-code with Terraform, and enforce container and API security controls. You’ll also perform threat modeling, lead incident response and forensic analysis, and drive secure DevOps security awareness across cross-functional teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Gulf Air Group
Gulf Air Group
20 hours ago

GF2073 - ANALYST – CYBER SECURITY

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Support the implementation and continuous enhancement of cyber security controls across applications, cloud infrastructure, DevOps pipelines, and operational environments. You will automate security testing in CI/CD (SAST/DAST/SCA), monitor and triage cloud and endpoint security alerts, validate infrastructure-as-code with Terraform, and enforce container and API security controls. You’ll also perform threat modeling, lead incident response and forensic analysis, and drive secure DevOps security awareness across cross-functional teams.
Location: Bahrain
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Entry level

Key Responsibilities

  • •Implement and maintain automated security checks in the CI/CD pipeline (SAST, DAST, SCA) to detect and remediate vulnerabilities early via shift-left security.
  • •Partner with developers to enforce secure coding standards (including OWASP Top 10), perform security-focused code reviews, and provide guidance on mitigating vulnerabilities.
  • •Monitor, analyze, and triage security alerts across cloud environments (AWS/Azure/Oracle) and perform root-cause analysis and forensic investigation for incidents.
  • •Scan and validate infrastructure-as-code (Terraform) for misconfigurations, enforce secrets management, and embed security-as-code practices in provisioning.
  • •Secure containerized workloads and APIs by implementing container image scanning, Kubernetes admission policies, runtime protections, and API gateway authentication/authorization and automated API security testing.

Key Requirements

  • •Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or an equivalent related major.
  • •0–2 years of experience in the related field.
  • •Ability to design and maintain security automation across CI/CD using SAST, DAST, and SCA approaches.
  • •Experience monitoring and triaging security alerts and performing security investigations and root cause analysis across cloud and on-prem environments.
  • •Knowledge of threat modeling and secure development practices (e.g., OWASP Top 10) including secure code reviews.
Education:Bachelor's in Computer Science, Information Technology, Cybersecurity
Skills:CollaborationIncident responseForensic investigationRisk assessmentThreat modeling
Tech Stack:OWASP Top 10SASTDASTSCACI/CDCI/CD pipelineAWSAzureOracleMicrosoft Defender for CloudAWS Guard DutyCSPMTerraformKubernetesIaCAzure Key VaultAWS Secrets ManagerSIEMXDRIDS/IPS

Company Brief

Gulf Air Group
Bahrain's national aviation group operating Gulf Air and related airline services. It provides passenger air transport, route network operations, and aviation support functions across the Middle East, Europe, Asia, and Africa.
Industry: Airlines
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Muharraq, Bahrain
Founded: 1950
WebsiteLinkedIn