לוח משרות דרושים מומחה בדיקת חדירות

Requirements:
Responsibilities:
Performing highly technical penetration testing for the biggest companies in the world.
Participate in Red Team projects, find undocumented API, reverse applications, bypass security checks.
Take part in developing internal security tools.

Requirements:
Professional experience in cloud security-related operations and engineering roles, specifically related to threat detection, incident response, and risk management.
Experience with data analytics, including searching large data sets, correlating attributes, interpreting results, extracting insights, and forming data-driven conclusions.
Experience with searching data with analytics tools including Elastic Search, Splunk, or a SIEM.
A working practical knowledge of at least one of the following Cloud Service Providers: AWS, Azure, GCP, OCI.
A practical understanding of industry security standards and control frameworks such as NIST, CISA, CIS, HIPAA, HISTRUST, PCI and others.
Experience developing, deploying, and maintaining code in formalized software development/CICD workflows including the use of BitBucket to manage code deployments.
Familiarity with the Agile methodology for project management.
Experience in a DevOps or similar role that required use of Python and GO.
Ability to author and run Elastic Search queries and interpret results from large data sets.
Proficient in the English language with strong written and verbal communication skills.
A passion for quality and experience optimizing results.
Bonus Points:
Experience writing detection rules with the Open Policy Agent query language, Rego.
Having served in a role focused on Detection Engineering; writing detection rules used by other teams.
Formalized training or certification in cloud computing, including administration, development, engineering, or architecture.

Requirements:
7+ years of experience leading penetration testing, application testing, and red team engagements
Experience with security tools such as Nmap, Metasploit, Kali Linux, Burp Suite Pro, etc., as well as other various commercial and self-developed testing tools
Experience with scripting languages such as python, ruby, POSIX shell, as well as familiarity with programming languages such as: C/C++/ObjC/C#, Java, PHP, or .NET
Detailed technical knowledge in multi-security domains (Web, Network, OS, DB, IoT, Cloud, SCADA- advantage)
Knowledge in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
Expertise in performing advanced exploitation and post-exploitation attacks as part of ethical hacking exercises including writing proof-of-concept exploits and creating custom payloads and modules for common ethical hacking frameworks and tools

Requirements:
3+ years of vulnerability research experience in open-source projects
3+ years of vulnerability research experience in web applications
Experience in team management
Experience in writing technical vulnerability blogs
Advantage - Experience in binary reverse engineering.

Requirements:
5+ years of experience in web application penetration testing, internal and external PT experience following OWASP methodologies
Hands-on experience with offensive security tools such as Burp Suite, Fiddler, SQLmap, Metasploit, Nmap, Netcat, BloodHound, Empire, and Wireshark
Strong understanding of network security concepts, including firewalls, VPNs (IPsec & SSL), IDS/IPS, and WLANs
Proficiency in scripting and automation (Python, PowerShell, JavaScript, Bash)
Experience managing and securing Windows and Unix/Linux environments
Knowledge of database security, including functions, interactions, and communications
Ability to effectively communicate findings to technical and non-technical stakeholders, including C-level executives
Hands-on experience in exploiting security vulnerabilities in lab or real-world environments (e.g., Capture the Flag challenges)
Experience in penetration testing for operational technologies (OT) - Advantage
OSCP / OSWE certifications or equivalent ethical hacking certifications - Advantage

Requirements:
At least 2 years of experience in information security as a Penetration Tester.
Bright, creative, highly motivated individuals with strong self-learning skills.
A team-player, effective communicators with excellent interpersonal relation.
Excellent written and verbal skills in English.
In-depth knowledge of networking and internet protocols.
Practical background in:
HTTP, HTML, XML, JavaScript, and other client-side languages.
Web application and API penetration testing.
Proficiency in OWASP top 10 vulnerabilities.
Android and IOS application penetration testing.
Technologies such as Android/IOS OS, JAVA/Objective-C or Swift, .NET, PHP, SQL, C++, Node.JS, or Angular.
Blue Team and incident response.