Penetration Tester

Mertens - MalamTeam
is hiring a skilled
Penetration Tester (PT)
to join a leading financial organization in
Rishon LeZion
.

Role Overview

We are seeking an experienced penetration tester to execute application, infrastructure, cloud and AI-related security assessments. The role involves hands-on testing, development of new attack capabilities, compliance testing against security standards, and clear reporting of findings to technical and non-technical stakeholders.

Responsibilities

• Perform manual and automated
  penetration tests
  for
  web and mobile applications
  , infrastructure, cloud environments, and AI components.
• Develop and validate new attack techniques and test cases.
• Execute compliance and standards assessments (OWASP, NIST, PCI-DSS, etc.).
• Use leading pentest tools to discover and exploit vulnerabilities; validate remediations.
• Produce clear, structured reports and executive summaries with remediation recommendations.
• Collaborate with development, security, and cloud teams to support fixes and verify mitigations.

Requirements

• 2+ years
  of proven experience performing penetration tests on
  WEB & MOBILE applications
  — mandatory.
• Deep knowledge of offensive methodologies and frameworks (OWASP, MITRE ATT&CK, NIST, etc.).
• Hands-on experience with common PT/security tools:
  Burp Suite, Nmap, Nessus, Wireshark, Metasploit
  , and similar.
• Familiarity with cloud environments (AWS, Azure) and experience testing cloud deployments — advantage.
• Strong understanding of network protocols and attack vectors (TCP/UDP, DNS, IP, HTTPS).
• Experience scripting or coding (PowerShell, Bash, JavaScript, Python) — advantage.
• Experience in financial sector engagements — advantage.
• Excellent report-writing and communication skills; ability to explain technical findings to business/stakeholder audiences.