URGENT HIRING PENETRATION TESTING ENGINEER | WEB & THICK

CLIENT APPLICATIONS

Job Details

- Position: Penetration Testing Engineer
- Experience: 36 Years
- Interview Rounds: 2 Rounds
- Round 1: Virtual (Mandatory)
- Round 2: Face-to-Face (F2F) (Mandatory)

Job Overview

Key Responsibilities

- Lead penetration testing engagements from kickoff and scope definition through execution and reporting.
- Perform penetration testing of web and thick client applications.
- Conduct dynamic analysis and reverse engineering of thick client applications to identify vulnerabilities and develop exploits.
- Use security testing tools to identify, validate, and demonstrate security weaknesses.
- Develop detailed PoCs and technical reports for identified vulnerabilities.
- Communicate findings to technical and non-technical stakeholders.
- Train product teams and promote security awareness.
- Stay updated on the latest exploits, attack techniques, and cybersecurity trends.

Mandatory Skills & Requirements
1. Penetration Testing

- Minimum 3+ years of hands-on experience in web and thick client application penetration testing.
- Strong practical knowledge of vulnerability assessment, exploitation, and security reporting.
- Ability to lead testing engagements independently.

1. Security Tools

Hands-on experience with tools such as:
- Nmap
- Wireshark
- Burp Suite
- OWASP ZAP
- Echo Mirage
- Kali Linux or similar security-focused operating systems

1. Thick Client Testing & Reverse Engineering

- Proficiency in dynamic analysis of thick client applications.
- Experience with reverse engineering, debuggers, and exploit development.
- Ability to analyze application logic and identify security vulnerabilities.

1. Certifications – Mandatory





Candidates must hold a relevant practical penetration testing certification. Target certifications include:
- OSCP
- OSEP
- OSED
- SANS GPEN
- GXPEN
- OSWE
- CREST CRT
- CTRE

Recruiter note: Verify the exact certification held by the candidate against the client's accepted certification criteria before submission.

1. Programming & Operating Systems

- Knowledge of programming languages such as C, C++, Java, or .NET.
- Strong understanding of Windows and Linux operating systems.

1. Security Standards & Frameworks

- OWASP
- NIST
- MITRE CWE
- CVSS

1. Communication & Reporting

- Strong verbal and written communication skills.
- Ability to create detailed technical reports and PoCs.
- Ability to learn quickly and adapt to emerging security threats.

Good-to-Have Skills
- Mobile application penetration testing for Android and iOS.
- Experience conducting security awareness sessions or training product teams.

Recruiter Screening Checklist
- 3–6 years of relevant penetration testing experience.
- Hands-on web application penetration testing.
- Hands-on thick client application penetration testing.
- Reverse engineering and dynamic analysis experience.
- Experience with Burp Suite, Nmap, Wireshark, and other relevant tools.
- Valid, relevant practical penetration testing certification.
- Knowledge of C/C++/Java/.NET and Windows/Linux.
- Understanding of OWASP, NIST, CWE, and CVSS.
- Solid PoC development, reporting, and communication skills.
- Important: Prioritize candidates with demonstrable thick client penetration testing and reverse engineering experience. Web application or mobile application testing alone is insufficient for this role.

Thanks & Regards, P. Deva

Talent Acquisition Manager

Honeybee Tech Solutions Pvt. Ltd.

Email: [email protected]

📌 Cybersecurity Penetration Tester R&D (Nashik)
🏢 Honeybee Tech Solutions
📍 Nashik