Cybersecurity Consultant (APP & INFRA)

<b>Description</b><br><p>We're looking for an experienced Cybersecurity Consultant (APP &amp; INFRA) who will save hundreds of our customers from potential cyber-attacks and hackers, who is eager to be exposed to various environments and hack the biggest and the leading companies in Israel, including many startups, corporates, and government organizations.</p><p><strong>KEY RESPONSIBILITIES:</strong></p><ul><li>Conduct penetration tests on various systems, including client/server, web and mobile applications, infrastructure, networks, internal systems, cloud-based systems, IoT devices, ATMs, and more.</li><li>Collaborate with cross-functional teams to simulate real-world cyber threats and provide actionable recommendations.</li><li>Stay updated on industry trends, emerging threats, and advanced hacking techniques.</li><li>Produce professional reports detailing findings and recommended mitigations.</li><li>Provide global and local clients with solutions to enhance the security level of their systems and assets.</li></ul><br> <b>Requirements</b><br><ul><li>Minimum 2 years of hands-on experience in Penetration Testing (both application and infrastructure).</li><li>Experience with penetration testing and hardening reviews in AWS, GCP, and Azure clouds.</li><li>Strong knowledge of offensive security techniques and methodologies.</li><li>Commitment to on-site work with flexibility for remote work when feasible.</li><li>Ability to pass customer background checks.</li><li>Knowledge and understanding of programming languages such as Python, Java, C/C++, and others.</li><li>Understanding of basic web technologies like HTML and JavaScript.</li><li>Familiarity with penetration testing tools like Burp Suite, OWASP ZAP, Metasploit, and Nmap.</li><li>Knowledge and understanding of security standards; at the minimum OWASP Top 10 and SANS/CWE Top 25.</li></ul><p><strong>Nice To Have:</strong></p><ul><li>Proficiency in web frameworks such as Angular, React, or Vue.js.</li><li>Security certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Web Application Penetration Tester (GWAPT).</li><li>Familiarity with NIST Cybersecurity Framework and NIST Special Publications.</li></ul><br> <b>Nice to Have</b><br>None<br>