Penetration Tester

Offensive Security Team Lead

Rishon LeZion · Full-time · Management

About The Position:

We are a cutting-edge cybersecurity company that combines powerful scanning technologies with expert services. This role sits right at that intersection of advanced hands-on research, combined with ownership over how our work shows up in the real world.

We’re looking for a hands-on Offensive Security Team Lead who wants to stay close to the technical edge while shaping how a team operates and grows. Someone who enjoys getting their hands dirty with the details of complex vulnerabilities and threats, but also cares about raising the bar across projects, people, and outcomes.

You’ll lead meaningful, end-to-end work across penetration testing, application security and vulnerability research, while guiding a team of talented security researchers. This is a role with real influence on the quality of our research, the way we work, and the impact we deliver to our clients.

Requirements:

• Lead and drive end-to-end security research projects across web applications, API, mobile (iOS/Android), and cloud environments (AWS, Azure, GCP) - from initial scoping through research, exploitation and final delivery
• Stay hands-on in the research itself, digging into complex vulnerabilities, validating findings, and setting the technical direction across engagements
• Translate technical findings into clear, actionable insights, helping clients understand risk, impact, and next steps without losing the technical depth
• Own multiple concurrent projects, maintaining clear visibility over progress, coverage, and research depth while ensuring consistently high-quality outcomes
• Define and drive the strategic implementation of Application Security within the SDLC, orchestrating a seamless blend of manual research, deep-dive code reviews, and automated SAST/SCA guardrails to ensure security at scale
• Set the standard for research quality by reviewing the work, challenging assumptions, and ensuring every deliverable reflects both clarity and impact
• Lead and mentor a team of experienced researchers, providing hands-on guidance, reviews, and support while helping them grow in both technical and professional dimensions
• Contribute to how we work as a group - refining methodologies, improving testing playbooks, and building scalable research workflows and tooling
• Stay ahead of the curve by keeping close to emerging vulnerabilities, exploitation techniques, and trends across the offensive security landscape

Skills and Experience

• 5+ years of hands-on experience in security research from either a product or services cybersecurity company
• 2+ years of experience leading a small team, with a clear focus on technical leadership and day-to-day mentorship
• Proven experience driving projects from scoping to final delivery with a strong sense of ownership
• Experience in Application Security (Web and Mobile), Pentesting, and Vulnerability Research, including strong familiarity with common attack vectors and exploitation techniques
• Experience working within secure SDLC practices, including "shift left" approaches and SAST and SCA tools (Semgrep, SonarQube, etc.)
• Confidence working directly with clients - presenting findings, leading discussions, and representing the team’s work clearly
• Strong communication skills in both Hebrew and English, written and verbal
• A proactive, accountable approach with strong organization and a collaborative mindset
• Strong source code analysis skills across common backend and scripting languages (e.g., Python, Go, Java, Node.js) with the ability to identify security vulnerabilities and logic flaws
• Experience in cloud-native pentesting and automated auditing within AWS, Azure, or GCP, with a focus on identifying misconfigurations and lateral movement risks.
• B.Sc. in Computer Science or equivalent hands-on experience (military background or advanced certifications such as OSCP, OSWE, etc. are a strong advantage)

Advantages:

• Broader experience across additional research domains such as cloud security, red teaming, infrastructure testing, or incident response
• Hands-on experience with industry-standard tools such as Prowler and Scout Suite
• Experience building internal tools, scripts, or automation to support research workflows
• Track record of vulnerability discovery and disclosure (e.g., CVEs, bug bounty)
• Contributions to the security community - conference talks or blog posts
• Familiarity with DFIR practices