Penetration Tester

Company Description Super Student (SS) is a growing organization focused on developing innovative, secure technology solutions for its users. The company values strong cybersecurity practices and is committed to protecting digital assets and sensitive information. SS encourages continuous learning, collaboration, and professional development for its team members. The work environment supports experimentation, improvement, and the adoption of modern security methodologies, making it a suitable place for security professionals to deepen their expertise.

Role Description This is a full-time, on-site Penetration Tester role based in Gaza. The Penetration Tester will be responsible for planning and executing security assessments on web, mobile, and infrastructure systems to identify vulnerabilities and misconfigurations. Day-to-day tasks include performing penetration tests, documenting findings, preparing detailed reports, and presenting actionable remediation recommendations to technical and non-technical stakeholders. The role involves collaborating with development and operations teams to strengthen security controls, participating in threat modeling activities, and staying current with emerging vulnerabilities, tools, and attack techniques. The Penetration Tester will also contribute to improving internal security processes and supporting security awareness across the organization.

Qualifications

• Candidates should possess strong Cybersecurity and Application Security skills, including knowledge of common vulnerabilities, secure coding principles, and security frameworks.
• Candidates should possess Reverse Engineering and Malware Analysis skills for understanding, deconstructing, and assessing malicious code and complex binaries.
• Candidates should possess Red Teaming experience, including adversarial simulation, lateral movement techniques, and realistic attack scenario development.
• Candidates should possess hands-on experience with penetration testing tools and methodologies (e.g., Burp Suite, Nmap, Metasploit, Wireshark, and OWASP standards).
• Candidates should possess strong analytical, problem-solving, and report-writing skills, with the ability to communicate clearly with both technical and non-technical audiences.
• Relevant certifications such as OSCP, OSCE, CEH, or similar credentials are beneficial.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience, is preferred.
• Ability to work on-site in Gaza, collaborate effectively in a team environment, and maintain high ethical and professional standards.