Qualifications/Requirements
• Cyber security professional with a minimum of 3 years of cyber security research experience.
• Must possess strong verbal and written communication skills in English.
• Have a broad understanding of the cyber security domain and common related technologies and tools.
• Have excellent understanding and hands-on experience with identifying and exploiting common security vulnerabilities, including OWASP-Top-10.
• Be able to assess web applications, with emphasis on RESTful APIs.
• Have good understanding of network infrastructure and protocols.
• Be able to understand complex code and writing scripts.
• Have a bachelor’s degree in Computer Sciences or a related field – An advantage.
• Participated in the past in CTF events – An advantage.
• Has hands-on experience with assessing and exploiting of at least one of the following domains:
• Private/public cloud and micro-service architectures (IaaS, PaaS and SaaS)
• Mobile infrastructure and applications (iOS/Android)
• Linux Kernel, containers, container runtime, and orchestrators
• Low-level systems and reverse engineering, with emphasis on exploitation
• The SDLC process with emphasis on threat modeling of complex systems
• Infrastructure and network communication analysis
• Research of proprietary protocols.
Desired Characteristics
• Have a pro-active work ethic with a “can-do” attitude
• Be reliable and responsible
• Passionate about cyber security
• Self-motivated
• Versatile, fast learner, and highly resourceful
• Have the ability to work independently and as a part of a team
