Penetration Tester

We are seeking a talented Penetration Tester to join our dynamic team in Israel. As a key member of our cybersecurity team, you will be responsible for identifying and exploiting security vulnerabilities in our clients' systems, networks, and applications. You will work closely with clients to assess their security posture, conduct penetration tests, and provide actionable recommendations to enhance their overall security defenses.

Responsibilities:

1. Conduct comprehensive penetration tests on various systems, networks, and applications to identify security vulnerabilities and weaknesses..
2. Utilize both manual and automated testing techniques to simulate real-world cyber attacks and assess the effectiveness of existing security controls.
3. Analyze and interpret penetration test results, providing detailed reports outlining identified vulnerabilities, potential impact, and recommended remediation measures.
4. Collaborate with clients to understand their specific security requirements and tailor penetration testing methodologies to meet their needs.
5. Work closely with cross-functional teams, including security analysts, engineers, and developers, to coordinate remediation efforts and ensure timely resolution of identified vulnerabilities.
6. Stay abreast of the latest security threats, vulnerabilities, and industry best practices to continuously improve our penetration testing methodologies and techniques.
7. Act as a subject matter expert on penetration testing-related matters, providing guidance and mentorship to junior team members as needed.

Qualifications:

1. Minimum of 1-3 years of experience in penetration testing, ethical hacking, or related cybersecurity roles. 3-5 years of experience are advantageous.
2. Relevant certifications such as OSCP, CEH are required.
3. Strong understanding of common security vulnerabilities and attack vectors, including but not limited to OWASP Top 10, CVEs, and common exploitation techniques.
4. Proficiency in using penetration testing tools such as Metasploit, Nmap, Burp Suite, and Wireshark.
5. Hands-on experience with various operating systems (Windows, Linux, Unix), networking protocols, and web technologies.