Application Penetration Tester - 242128

Application Penetration Tester | Herzliya

A leading company in Herzliya is looking for an experienced Application Penetration Tester to join its cybersecurity team.

If Offensive Security is where you thrive, and you enjoy uncovering real-world vulnerabilities before attackers do — this could be the right opportunity for you.

What You’ll Do

• Perform hands-on application penetration testing across Web, Mobile, and API environments
• Conduct penetration testing of infrastructure and cloud environments
• Identify both logical and technical vulnerabilities and assess their security impact
• Produce clear, professional penetration testing reports and work closely with development teams through remediation
• Work with a wide range of technologies, tools, and advanced Offensive Security methodologies

Must-Have Requirements

• At least 3 years of hands-on experience in Application Penetration Testing
• Strong knowledge of OWASP Top 10 and OWASP ASVS
• High proficiency with Burp Suite Professional
• Hands-on experience testing REST, SOAP, and GraphQL APIs using Burp Suite or Postman
• Ability to review code in languages such as Java, C#, Node.js, or Python to identify security vulnerabilities
• Deep understanding of Authentication and Authorization mechanisms, including OAuth2, SAML, and JWT

Strong Advantages

• Scripting experience with Python or Bash
• Experience with Cloud and Microservices environments
• Experience performing Mobile Penetration Testing on iOS and/or Android
• Familiarity with Windows and Linux environments and infrastructure-level attacks
• Relevant certifications such as OSCP, OSWE, or GWAPT

What We’re Looking For

• Excellent technical reporting skills in both Hebrew and English
• Ability to work directly with development teams and clearly communicate security findings
• An offensive mindset, strong technical curiosity, and excellent problem-solving skills
• Willingness and eligibility to undergo a security clearance process