Penetration Tester & Security Researcher

Accelerate Your Career in Cybersecurity

As a leader in Automated Security Validation, we help businesses around the world safely emulate real-world attacks to uncover their vulnerabilities. At Pentera, you will be at the forefront of cybersecurity innovation, working on advanced tools that challenge organizations' defenses and push the limits of security testing.

With over 400 team members and 1,100+ customers in more than 50 countries, Pentera is a growing company supported by top investors like Insight Partners, K1, and The Blackstone Group.

If you are looking to grow your skills, make a difference, and be part of an innovative team, Pentera is the place for you.

About the Role:

We are seeking a talented Penetration Tester & Researcher to lead complex offensive security engagements and groundbreaking research. You will execute sophisticated attack simulations, identify high-value vulnerabilities, and collaborate with clients to enhance their security posture.

This role offers a balance between hands-on technical assessments and original research that shapes the broader cybersecurity community.

Roles and Responsibilities:

• Conduct advanced penetration tests across web, mobile, and thick-client applications.
• Contribute to internal tools, scripts, and methodologies that enhance efficiency.
• Design and simulate real-world attack chains reflecting modern threat actors.
• Perform vulnerability research, exploit development, and threat modeling.
• Research, develop, and implement offensive security methodologies utilizing AI technologies.
• Produce detailed technical reports with actionable remediation strategies.
• Collaborate directly with clients to guide mitigation and improve resilience.
• Publish research, present findings, and represent Pentera at conferences or in public forums.
  
  

• 2-3 years of experience in application penetration testing, including mobile, web, and thick-client applications.
• Hands-on experience using AI offensively and attacking AI-powered systems.
• Solid technical foundation in networking, operating systems, and cloud.
• Excellent communication and presentation skills.
• Fluency in Hebrew and English.
  
  

• Active participation in bug bounty programs or responsible disclosure initiatives.
• Industry certifications such as OSCP, OSWA, OSWE, or OSCE.
• Familiarity with cloud and container security, Kubernetes, and IaC.
• Experience integrating security practices within development lifecycles.
• Proven ability to lead or publish offensive research.