Offer summary

Qualifications:

Minimum 2 years of hands-on experience in penetration testing for applications and infrastructure., Experience with penetration testing and security reviews in AWS, GCP, and Azure cloud environments., Strong knowledge of offensive security techniques, methodologies, and security standards like OWASP Top 10., Proficiency in programming languages such as Python, Java, C/C++, and familiarity with penetration testing tools..

Key responsibilities:

Conduct penetration tests on various systems including applications, infrastructure, and IoT devices.

Collaborate with teams to simulate cyber threats and provide security recommendations.

Produce detailed reports on findings and suggested mitigations.

Assist clients in enhancing the security of their systems and assets.

Job description

Description

We're looking for an experienced Cybersecurity Consultant (APP & INFRA) who will save hundreds of our customers from potential cyber-attacks and hackers, who is eager to be exposed to various environments and hack the biggest and the leading companies in Israel, including many startups, corporates, and government organizations.

KEY RESPONSIBILITIES:

Conduct penetration tests on various systems, including client/server, web and mobile applications, infrastructure, networks, internal systems, cloud-based systems, IoT devices, ATMs, and more.
Collaborate with cross-functional teams to simulate real-world cyber threats and provide actionable recommendations.
Stay updated on industry trends, emerging threats, and advanced hacking techniques.
Produce professional reports detailing findings and recommended mitigations.
Provide global and local clients with solutions to enhance the security level of their systems and assets.

Requirements

Minimum 2 years of hands-on experience in Penetration Testing (both application and infrastructure).
Experience with penetration testing and hardening reviews in AWS, GCP, and Azure clouds.
Strong knowledge of offensive security techniques and methodologies.
Commitment to on-site work with flexibility for remote work when feasible.
Ability to pass customer background checks.
Knowledge and understanding of programming languages such as Python, Java, C/C++, and others.
Understanding of basic web technologies like HTML and JavaScript.
Familiarity with penetration testing tools like Burp Suite, OWASP ZAP, Metasploit, and Nmap.
Knowledge and understanding of security standards; at the minimum OWASP Top 10 and SANS/CWE Top 25.

Nice To Have:

Proficiency in web frameworks such as Angular, React, or Vue.js.
Security certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Web Application Penetration Tester (GWAPT).
Familiarity with NIST Cybersecurity Framework and NIST Special Publications.

Required profile