Pentest Product Associate
Wiz
שכר לא צויןTel Aviv, היברידימידמשרה מלאה
משרה חיצונית, ההגשה באתר החברהאושר שהמשרה פתוחה לפני 11 שעות
You will operate Wiz’s AI-driven DAST agent and develop detection methods for cloud-native technologies. You will help the agents simulate attacks, classify vulnerabilities accurately, and improve Wiz’s vulnerability management product.
מה תעשו
- Develop detection algorithms to classify cloud technologies and refine attack policies for security agents.
- Analyze cloud services, APIs, and log payloads to review attack paths and reduce false positives.
- Translate emerging cloud and API attack techniques into behaviors for the Wiz DAST engine.
- Collaborate with Research, Backend, and R&D teams to turn operational insights into feature requests.
דרישות
- At least 2 years of hands-on experience in AppSec or penetration testing, including proficiency with tools such as Burp Suite, OWASP ZAP, or Acunetix.
- Hands-on experience with Linux, Windows, Docker, Kubernetes, web protocols, and authentication mechanisms.
- Proficiency in Python, Bash, or Go for security automation and working with codebases.
- Knowledge of networking concepts, the OSI model, and at least one of AWS, Azure, or GCP.
- Legal right to work in the country where the position is based without visa sponsorship.
יתרון
- Knowledge of AI/ML and how LLMs or reinforcement learning agents operate in cybersecurity.
- SaaS and cloud experience, including familiarity with cloud-native architectures.
- Red teaming experience, including simulated adversarial attacks and bypassing WAF or security controls.
- Ability to analyze complex logs and scans and distinguish tool failures, configuration issues, and valid security findings.
תנאי סף
- At least 2 years of hands-on experience in AppSec or penetration testing
- Legal right to work in the country where the position is based without visa sponsorship
Penetration TestingApplication SecurityBurp SuiteKubernetesPythonCloud SecurityRESTOAuth