Advance Security Engineer- 12 month contract

Were looking for a Security Response Engineer with strong expertise in Web Application security to join our Advanced Security Response Team (ASRT).
The Advanced Security Response Team is dedicated to the first response for security incidents, focusing primarily on the operational aspects of web application security. This includes analyzing threats, suggesting immediate remediation and mitigation methods, and actively working to block attacks in real time.
The scope of activities spans network layers 3, 4, and 7, covering a broad spectrum of threats. This includes defending against DoS & DDoS attacks, brute-force attempts, scraping, filtering unwanted traffic, as well as initial analysis and mitigation of application attack vectors such as XSS, SQL injection (SQLi), and remote code execution.
Another important responsibility of the ASRT is managing false positives. The team will investigate root causes of these misfires, propose optimal solutions to prevent recurrence, and apply necess

דרישות:

At least 1 year of experience in security, networking, or a related technical field, or equivalent hands-on exposure through personal projects, labs, or internships.
Solid understanding of web application fundamentals and common vulnerabilities (OWASP Top 10 such as SQLi, XSS, RCE, LFI, RFI).
Working knowledge of TCP/IP, HTTP/S, DNS, and SSL/TLS.
Comfortable using tools like Burp Suite, Postman, Wireshark, or similar.
Strong communication and analytical skills, with the ability to stay clear and focused under pressure.
Fluent English (spoken and written).
Nice to Have:
Familiarity with Python or Bash scripting.
Curiosity to explore AppSec tools and techniques, and motivation to deepen your security expertise.
A proactive approach to learning and adapting to evolving cyber threats. המשרה מיועדת לנשים ולגברים כאחד.