Description
Join our Offensive Security Pentest team in Israel as a hands-on Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features.
Responsibilities:
- Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems.
- Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements.
- Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes.
- Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response.
Requirements:
- About 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research.
- Run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development.
- Understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces.
- Explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders.
Nice to Have:
- Published security research, conference talks, advisories or publicly disclosed vulnerabilities.
- Experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams.
- Knowledge of AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems.
- Led secure-by-design initiatives and balance security rigor with product speed and developer experience.