Senior Penetration Tester

Deloitte Cyber Center in Israel is seeking a talented Senior Penetration Tester to join our team. In this role, you will be responsible for conducting comprehensive penetration tests across Active Directory environments, web applications, mobile applications, API’s, Physical and Cloud environments, with a strong emphasis on cyber security. You will be expected to identify, exploit, and assess vulnerabilities, produce high-quality reports, and present findings to clients in a clear and concise manner.

This position requires both strong technical expertise and the ability to work effectively in a consulting environment, leading end-to-end penetration testing projects while collaborating with team members and global clients.

Key Responsibilities:

• Perform penetration testing of Active Directory environments, web applications, mobile applications, API’s, Physical and Cloud environments.
• Identify, exploit, and document vulnerabilities, including bypassing security controls where applicable.
• Write technical and managerial reports in English, including actionable recommendations.
• Lead and manage penetration testing projects, including scoping, delivery, reporting, and client presentations.
• Stay updated with the latest tools, countermeasures, threats, and attack techniques.

Share knowledge with colleagues and contribute to a collaborative team environment.

• Minimum 3 years of proven experience in penetration testing.
• Strong knowledge of enterprise networks, communication protocols, and Active Directory.
• Good knowledge of The OWASP Top 10 Web Application and OWASP API Top 10.
• Proficiency in scripting languages such as Python, PowerShell, or similar.
• Experience with tools such as Burp Suite and Postman.
• High-level English proficiency (written and spoken).
• Proven experience writing clear, professional reports in English.
• Ability to work both independently and as part of a team.
• Strong research skills and ability to learn new technologies quickly.

Advantages

• Experience with cloud penetration testing (AWS, Azure, GCP).
• Experience in bypassing security products and advanced attack techniques.
• Background in Blue Team / defensive security environments.
• Previous consulting experience with global clients.
• Certifications such as OSCP, OSEP, OSWE, BSCP, CWEE, CRTP, CRTE, or similar.
• Experience with Code Review and Whitebox PT.
• Experience with Physical PT.

At Deloitte, we believe that an inclusive mindset and diverse workforce are two of our greatest strengths. We foster an environment where creativity, collaboration, and innovation are encouraged, and where every individual feels valued and respected.

If you are a passionate penetration tester looking to make an impact and grow in a dynamic global team, we encourage you to apply.

We at Deloitte believe that diversity and inclusion among our people is a critical component of our success and that is why we cultivate an organizational culture that contains and embraces diversity in all its forms.