דרושים Offensive Security Researcher Team Leader ב-Ey ב-Israel, Tel Aviv-yafo

Responsibilities:

• Lead a high-performing offensive security team specializing in red teaming, threat emulation, advanced adversary simulation, and vulnerability research.
• Mentor and grow team members, fostering a culture of continuous learning, innovation, and operational excellence.
• Promote a culture of innovation, encouraging curiosity and technical excellence within the team.
• Translate technical discoveries into operational insights that enhance offensive engagements and deliver clear value to clients
• Collaborate cross-functionally with EY's cyber offensive and defensive teams
• Develop and maintain internal tools and methodologies that enhance offensive capabilities, automation, and reporting accuracy.
• Design and execute tailored offensive engagements, including full-scope red team operations, assumed breach scenarios, and social engineering campaigns.

Requirements:

• 5 + years of hands-on experience in offensive security operations (e.g., red teaming, exploitation, adversary simulation)
• 2+ years of experience leading technical teams or complex offensive security projects
• Proven expertise in advanced attack techniques, including privilege escalation, lateral movement, evasion, and persistence
• Strong background in vulnerability research, exploit development, or reverse engineering
• Strong developing and automation skills
• Familiarity with EDR, SIEM, and modern detection mechanisms – and how to bypass them
• Strong ability to translate complex technical findings into clear, actionable business insights
• Experience in client-facing roles, including presentations to senior stakeholders
• Excellent written and spoken English communication skills

In this role, you'll lead hands-on red team activities, threat research, and vulnerability discovery—pushing the boundaries of what's possible in cyber offense. You will work closely with product, engineering, and executive stakeholders to translate complex attack scenarios into real-world risk mitigation strategies.

Responsibilities:

• Lead a high-performing offensive security team specializing in red teaming, threat emulation, advanced adversary simulation, and vulnerability research.
• Mentor and grow team members, fostering a culture of continuous learning, innovation, and operational excellence.
• Promote a culture of innovation, encouraging curiosity and technical excellence within the team.
• Translate technical discoveries into operational insights that enhance offensive engagements and deliver clear value to clients
• Collaborate cross-functionally with EY's cyber offensive and defensive teams
• Develop and maintain internal tools and methodologies that enhance offensive capabilities, automation, and reporting accuracy.
• Design and execute tailored offensive engagements, including full-scope red team operations, assumed breach scenarios, and social engineering campaigns.

Requirements:

• 5 + years of hands-on experience in offensive security operations (e.g., red teaming, exploitation, adversary simulation)
• 2+ years of experience leading technical teams or complex offensive security projects
• Proven expertise in advanced attack techniques, including privilege escalation, lateral movement, evasion, and persistence
• Strong background in vulnerability research, exploit development, or reverse engineering
• Strong developing and automation skills
• Familiarity with EDR, SIEM, and modern detection mechanisms – and how to bypass them
• Strong ability to translate complex technical findings into clear, actionable business insights
• Experience in client-facing roles, including presentations to senior stakeholders
• Excellent written and spoken English communication skills

Key Responsibilities

As a Team Lead, you will:
•
•Act as the primary point of contact for clients, effectively presenting findings and recommendations.
•Enhance penetration testing methodologies, tools, and services.
•
•Offer expert guidance on secure design and development best practices across various platforms and technologies.

Requirements

•Experience:

• At least 5 years of experience in information security, including a minimum of 2 years in a leadership role managing penetration testing teams.
• Proven track record in delivering complex security assessments and managing client relationships.

•Leadership Skills:

• Strong leadership capabilities with the ability to inspire and manage a team of security professionals.
• Experience mentoring and developing team members’ technical and professional skills.

•Technical Skills:

• In-depth knowledge of networking and internet protocols.
• Hands-on experience in at least three of the following:
  • HTML, XML, JavaScript, WebAssembly and other client-side languages.
  • Web application and API penetration testing.
  • OWASP Top 10 vulnerabilities.
  • Android and iOS application penetration testing.
  • Windows and MacOS applications penetration testing.
  • Hardware hacking
  • Technologies such as Android/iOS OS, Java/Objective-C or Swift
• Familiarity with Red/Blue Team methodologies and incident response practices.

•Certifications (Preferred):

• CEH, OSCP, CISSP, or equivalent certifications are an advantage.

•Soft Skills:

• Bright, creative, and highly motivated individual with strong self-learning abilities.
• Excellent written and verbal communication skills in English.
• A team player with strong interpersonal skills.

Key Responsibilities

As a Team Lead, you will:
•Lead and mentor a team of penetration testers, fostering a culture of continuous learning and excellence.
•Act as the primary point of contact for clients, effectively presenting findings and recommendations.
•Enhance penetration testing methodologies, tools, and services.
•Identify skill gaps and provide training to team members to strengthen technical capabilities.
•Offer expert guidance on secure design and development best practices across various platforms and technologies.

Requirements

•Experience:

• At least 5 years of experience in information security, including a minimum of 2 years in a leadership role managing penetration testing teams.
• Proven track record in delivering complex security assessments and managing client relationships.

•Leadership Skills:

• Strong leadership capabilities with the ability to inspire and manage a team of security professionals.
• Experience mentoring and developing team members’ technical and professional skills.

•Technical Skills:

• In-depth knowledge of networking and internet protocols.
• Hands-on experience in at least three of the following:
  • HTML, XML, JavaScript, WebAssembly and other client-side languages.
  • Web application and API penetration testing.
  • OWASP Top 10 vulnerabilities.
  • Android and iOS application penetration testing.
  • Windows and MacOS applications penetration testing.
  • Hardware hacking
  • Technologies such as Android/iOS OS, Java/Objective-C or Swift
• Familiarity with Red/Blue Team methodologies and incident response practices.

•Certifications (Preferred):

• CEH, OSCP, CISSP, or equivalent certifications are an advantage.

•Soft Skills:

• Bright, creative, and highly motivated individual with strong self-learning abilities.
• Excellent written and verbal communication skills in English.
• A team player with strong interpersonal skills.

Key Responsibilities

As a Team Lead, you will:
•Lead and mentor a team of penetration testers, fostering a culture of continuous learning and excellence.
•Act as the primary point of contact for clients, effectively presenting findings and recommendations.
•Enhance penetration testing methodologies, tools, and services.
•Identify skill gaps and provide training to team members to strengthen technical capabilities.
•Offer expert guidance on secure design and development best practices across various platforms and technologies.

Requirements

•Experience:

• At least 5 years of experience in information security, including a minimum of 2 years in a leadership role managing penetration testing teams.
• Proven track record in delivering complex security assessments and managing client relationships.

•Leadership Skills:

• Strong leadership capabilities with the ability to inspire and manage a team of security professionals.
• Experience mentoring and developing team members’ technical and professional skills.

•Technical Skills:

• In-depth knowledge of networking and internet protocols.
• Hands-on experience in at least three of the following:
  • HTML, XML, JavaScript, WebAssembly and other client-side languages.
  • Web application and API penetration testing.
  • OWASP Top 10 vulnerabilities.
  • Android and iOS application penetration testing.
  • Windows and MacOS applications penetration testing.
  • Hardware hacking
  • Technologies such as Android/iOS OS, Java/Objective-C or Swift
• Familiarity with Red/Blue Team methodologies and incident response practices.

•Certifications (Preferred):

• CEH, OSCP, CISSP, or equivalent certifications are an advantage.

•Soft Skills:

• Bright, creative, and highly motivated individual with strong self-learning abilities.
• Excellent written and verbal communication skills in English.
• A team player with strong interpersonal skills.