דרושים Offensive Security Penetration Tester בתל אביב

Join our Offensive Security Team @PwC NEXT Israel

Are you passionate about cybersecurity and eager to make an impact?

At PwC NEXT Israel, our mission is to help businesses grow through cutting-edge technology, building a secure digital future for our clients. Join our Offensive Security team- working on some of the most innovative and challenging projects in the industry.

What are we looking for?

We're seeking a driven and talented penetration tester who is passionate about offensive security, ethical hacking, and red team operations.

As part of our growing and highly professional team, you’ll play a key role in delivering end-to-end penetration testing services and simulating real-world cyber threats to assess the resilience of our clients’ networks, systems, and applications.

Your responsibilities will include:

• Planning and executing advanced penetration tests across a wide range of environments
• Identifying and exploiting vulnerabilities in networks, web applications, mobile apps, and cloud platforms
• Conducting red team engagements and adversary simulations
• Communicating findings and recommendations to technical and non-technical stakeholders
• Staying up to date with the latest attack techniques, tools, and trends in offensive security

Requirements:

• 2+ years of experience in penetration testing (infrastructure and applications)
• Certifications such as OSCP, CRTO, OSEP or equivalent
• Experience with at least one cloud platform: AWS, Azure, or GCP
• Strong understanding of OWASP Top 10 and common application vulnerabilities
• Experience using security tools such as Burp Suite, Nmap, Metasploit, C2 Framework, etc
• Strong communication skills (verbal and written) with the ability to influence and manage relationships up to senior management levels
• Strong analytical and problem-solving skills with a self-driven learning mindset
• A team player who can also work independently and has a strong desire to learn and grow

Advantage:

• Knowledge in mobile application, SCADA, IoT, or hardware
• Experience participating in red team exercises or adversary emulation
• Proficiency in at least two programming languages, such as Python, PHP, C, or C++
• Familiarity with web technologies like JavaScript, HTML, and CSS, along with frameworks like React, Angular, or Vue
• Understanding of or research in LLM systems (e.g., prompt injection, model exploitation)
• Prior proven experience in cybersecurity research