Penetration Tester

Mertens - MalamTeam is hiring a skilled Penetration Tester (PT) to join a leading financial organization in Rishon LeZion.

Role Overview

We are seeking an experienced penetration tester to execute application, infrastructure, cloud and AI-related security assessments. The role involves hands-on testing, development of new attack capabilities, compliance testing against security standards, and clear reporting of findings to technical and non-technical stakeholders.

Responsibilities

• Perform manual and automated penetration tests for web and mobile applications, infrastructure, cloud environments, and AI components.
• Develop and validate new attack techniques and test cases.
• Execute compliance and standards assessments (OWASP, NIST, PCI-DSS, etc.).
• Use leading pentest tools to discover and exploit vulnerabilities; validate remediations.
• Produce clear, structured reports and executive summaries with remediation recommendations.
• Collaborate with development, security, and cloud teams to support fixes and verify mitigations.

Requirements

• 2+ years of proven experience performing penetration tests on WEB & MOBILE applications — mandatory.
• Deep knowledge of offensive methodologies and frameworks (OWASP, MITRE ATT&CK, NIST, etc.).
• Hands-on experience with common PT/security tools: Burp Suite, Nmap, Nessus, Wireshark, Metasploit, and similar.
• Familiarity with cloud environments (AWS, Azure) and experience testing cloud deployments — advantage.
• Strong understanding of network protocols and attack vectors (TCP/UDP, DNS, IP, HTTPS).
• Experience scripting or coding (PowerShell, Bash, JavaScript, Python) — advantage.
• Experience in financial sector engagements — advantage.
• Excellent report-writing and communication skills; ability to explain technical findings to business/stakeholder audiences.