Cybersecurity Penetration Tester R&D

URGENT HIRING PENETRATION TESTING ENGINEER | WEB & THICK

CLIENT APPLICATIONS

Job Details

• Position: Penetration Testing Engineer
• Experience: 36 Years
• Interview Rounds: 2 Rounds
• Round 1: Virtual (Mandatory)
• Round 2: Face-to-Face (F2F) (Mandatory)

Job Overview

Key Responsibilities

• Lead penetration testing engagements from kickoff and scope definition through execution and reporting.
• Perform penetration testing of web and thick client applications.
• Conduct dynamic analysis and reverse engineering of thick client applications to identify vulnerabilities and develop exploits.
• Use security testing tools to identify, validate, and demonstrate security weaknesses.
• Develop detailed PoCs and technical reports for identified vulnerabilities.
• Communicate findings to technical and non-technical stakeholders.
• Train product teams and promote security awareness.
• Stay updated on the latest exploits, attack techniques, and cybersecurity trends.

Mandatory Skills & Requirements

1. Penetration Testing

• Minimum 3+ years of hands-on experience in web and thick client application penetration testing.
• Strong practical knowledge of vulnerability assessment, exploitation, and security reporting.
• Ability to lead testing engagements independently.

2. Security Tools

Hands-on experience with tools such as:

• Nmap
• Wireshark
• Burp Suite
• OWASP ZAP
• Echo Mirage
• Kali Linux or similar security-focused operating systems

3. Thick Client Testing & Reverse Engineering

• Proficiency in dynamic analysis of thick client applications.
• Experience with reverse engineering, debuggers, and exploit development.
• Ability to analyze application logic and identify security vulnerabilities.

4. Certifications – Mandatory

Candidates must hold a relevant practical penetration testing certification. Target certifications include:

• OSCP
• OSEP
• OSED
• SANS GPEN
• GXPEN
• OSWE
• CREST CRT
• CTRE

Recruiter note: Verify the exact certification held by the candidate against the client's accepted certification criteria before submission.

5. Programming & Operating Systems

• Knowledge of programming languages such as C, C++, Java, or .NET.
• Strong understanding of Windows and Linux operating systems.

6. Security Standards & Frameworks

• OWASP
• NIST
• MITRE CWE
• CVSS

7. Communication & Reporting

• Strong verbal and written communication skills.
• Ability to create detailed technical reports and PoCs.
• Ability to learn quickly and adapt to emerging security threats.

Good-to-Have Skills

• Mobile application penetration testing for Android and iOS.
• Experience conducting security awareness sessions or training product teams.

Recruiter Screening Checklist

• 3–6 years of relevant penetration testing experience.
• Hands-on web application penetration testing.
• Hands-on thick client application penetration testing.
• Reverse engineering and dynamic analysis experience.
• Experience with Burp Suite, Nmap, Wireshark, and other relevant tools.
• Valid, relevant practical penetration testing certification.
• Knowledge of C/C++/Java/.NET and Windows/Linux.
• Understanding of OWASP, NIST, CWE, and CVSS.
• Strong PoC development, reporting, and communication skills.
• Important: Prioritize candidates with demonstrable thick client penetration testing and reverse engineering experience. Web application or mobile application testing alone is insufficient for this role.

Thanks & Regards,
P. Deva
Talent Acquisition Manager
Honeybee Tech Solutions Pvt. Ltd.
Email: peddollu.d@honeybeetechsolutions.com