Penetration Tester Red Team (Web3)

At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Penetration Tester Red Team (Web3) to join one of our clients' teams in Israel. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.

Responsibilities:

• Perform application and infrastructure penetration testing in both Web and Mobile environments.

• Conduct Red Team engagements to simulate advanced persistent threat scenarios.

• Identify and exploit vulnerabilities in custom-built and third-party applications.

• Work closely with engineering and security teams to communicate findings and assist in remediation efforts.

• Prepare comprehensive reports detailing vulnerabilities, exploitation paths, and security recommendations.

• Stay current with emerging threats, attack techniques, and security trends.

• Contribute to threat modeling and red/purple team exercises.

• Collaborate with the Blue Team to improve detection and response capabilities.

Requirements:

• Experience in penetration testing or Red Team operations

• Familiarity with Web3 technologies such as smart contracts, blockchain protocols, and decentralized applications (dApps).

• Strong knowledge of OWASP Top 10 and common web/mobile security flaws.

• Proficiency in attack simulation tools, scripting (e.g., Python, Bash), and manual testing techniques.

• Solid understanding of networking, operating systems, and application architectures.

• Experience testing APIs, web applications, mobile apps (iOS/Android), and infrastructure components.

• Strong technical background and problem-solving skills.

Nice to Have:

• Experience with smart contract auditing or blockchain-specific attack vectors.

• Certifications such as OSCP, OSCE, CRTO, or similar.