Penetration Tester Red Team (Web3)

At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Penetration Tester Red Team (Web3) to join one of our clients' teams in Israel. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.

Responsibilities:

Perform application and infrastructure penetration testing in both Web and Mobile environments.

Conduct Red Team engagements to simulate advanced persistent threat scenarios.

Identify and exploit vulnerabilities in custom-built and third-party applications.

Work closely with engineering and security teams to communicate findings and assist in remediation efforts.

Prepare comprehensive reports detailing vulnerabilities, exploitation paths, and security recommendations.

Stay current with emerging threats, attack techniques, and security trends.

Contribute to threat modeling and red/purple team exercises.

Collaborate with the Blue Team to improve detection and response capabilities.

Requirements:

Experience in penetration testing or Red Team operations

Familiarity with Web3 technologies such as smart contracts, blockchain protocols, and decentralized applications (dApps).

Strong knowledge of OWASP Top 10 and common web/mobile security flaws.

Proficiency in attack simulation tools, scripting (e.g., Python, Bash), and manual testing techniques.

Solid understanding of networking, operating systems, and application architectures.

Experience testing APIs, web applications, mobile apps (iOS/Android), and infrastructure components.

Strong technical background and problem-solving skills.

Nice to Have:

Experience with smart contract auditing or blockchain-specific attack vectors.

Certifications such as OSCP, OSCE, CRTO, or similar.