Penetration Tester

We are seeking a highly skilled and experienced Red Team Operator to join our cybersecurity team’s offensive security activities. In this role, you will play a critical role in identifying and mitigating potential security threats and risks to our multinational organization end to end.

WHAT YOU WILL DO

• Conduct advanced penetration testing and simulated attacks on our organization's networks, systems, and infrastructure to identify vulnerabilities and weaknesses.
• Collaboration & Strategy: Work closely with other security teams to provide actionable recommendations for remediation and security enhancements, ensuring alignment with the company’s overarching security strategies.
• Research & Innovation: Continuously research the latest attack methods, techniques, and tools to keep our red team operations cutting-edge and ahead of emerging threats.
• Training & Development: Provide training, mentorship, and guidance to team members, enhancing their skills and contributing to the overall security posture of the company.

WHAT YOU BRING ALONG

• Experience: 5+ years of hands-on experience in red team operations or a closely related offensive security role.
• Strong technical understanding of Active Directory environments and their attack vectors, including trust relationships, GPO manipulation, relay attacks, and Kerberos exploitation.
• Solid background in web application security and OWASP Top 10 methodologies, with experience identifying and remediating vulnerabilities.
• Technical Proficiency: Strong understanding of network protocols, network security, and cloud environments (e.g., AWS, Azure).
• Language Skills: Fluent in English; proficiency in Hebrew is a must. German language skills are an advantage.
• Specialized Knowledge: Experience in OT and IoT security is a significant advantage.
• Soft skills: Strong analytical and problem-solving skills, a proactive can-do attitude, and excellent written and verbal communication skills.

Join our Red Team to lead high-impact offensive security operations that protect the company’s digital assets and reputation through the expert identification, validation, and mitigation of potential threats.