Cybersecurity Penetration Tester R&D

Honeybee Tech Solutions; Nashik District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Honeybee Tech Solutions in Nashik is seeking a Penetration Testing Engineer to lead engagements from kickoff to reporting. You will test web and thick client applications, conduct dynamic analysis and reverse engineering, and develop PoCs for identified vulnerabilities.

Ideal candidates have 3+ years of hands-on experience, strong reporting skills, and certifications such as OSCP/OSWE. The role emphasizes independent leadership with mandatory rounds for interviews and hands-on testing.

Qualifications

• 3+ years of hands-on experience in web and thick client application penetration testing.
• Strong practical knowledge of vulnerability assessment, exploitation, and security reporting.
• Ability to lead testing engagements independently.

Responsibilities

• Lead penetration testing engagements from kickoff and scope definition through execution and reporting.
• Perform penetration testing of web and thick client applications.
• Conduct dynamic analysis and reverse engineering of thick client applications to identify vulnerabilities and develop exploits.
• Use security testing tools to identify, validate, and demonstrate security weaknesses.
• Develop detailed PoCs and technical reports for identified vulnerabilities.
• Communicate findings to technical and non-technical stakeholders.
• Train product teams and promote security awareness.
• Stay updated on the latest exploits, attack techniques, and cybersecurity trends.

Skills

Penetration testing

Security reporting

Independent lead testing

Communication skills

Education

OSCP

OSEP

OSED

SANS GPEN

GXPEN

OSWE

CREST CRT

CTRE

Tools

Nmap

Wireshark

Burp Suite

OWASP ZAP

Echo Mirage

Kali Linux

Job description

URGENT HIRING PENETRATION TESTING ENGINEER | WEB & THICK

CLIENT APPLICATIONS

Job Details

• Position: Penetration Testing Engineer
• Experience: 36 Years
• Interview Rounds: 2 Rounds
• Round 1: Virtual (Mandatory)
• Round 2: Face-to-Face (F2F) (Mandatory)

Job Overview

Key Responsibilities

• Lead penetration testing engagements from kickoff and scope definition through execution and reporting.
• Perform penetration testing of web and thick client applications.
• Conduct dynamic analysis and reverse engineering of thick client applications to identify vulnerabilities and develop exploits.
• Use security testing tools to identify, validate, and demonstrate security weaknesses.
• Develop detailed PoCs and technical reports for identified vulnerabilities.
• Communicate findings to technical and non-technical stakeholders.
• Train product teams and promote security awareness.
• Stay updated on the latest exploits, attack techniques, and cybersecurity trends.

Mandatory Skills & Requirements

1. Penetration Testing

• Minimum 3+ years of hands-on experience in web and thick client application penetration testing.
• Strong practical knowledge of vulnerability assessment, exploitation, and security reporting.
• Ability to lead testing engagements independently.

2. Security Tools

Hands-on experience with tools such as:

• Nmap
• Wireshark
• Burp Suite
• OWASP ZAP
• Echo Mirage
• Kali Linux or similar security-focused operating systems

3. Thick Client Testing & Reverse Engineering

• Proficiency in dynamic analysis of thick client applications.
• Experience with reverse engineering, debuggers, and exploit development.
• Ability to analyze application logic and identify security vulnerabilities.

4. Certifications – Mandatory

Candidates must hold a relevant practical penetration testing certification. Target certifications include:

• OSCP
• OSEP
• OSED
• SANS GPEN
• GXPEN
• OSWE
• CREST CRT
• CTRE

5. Programming & Operating Systems

• Knowledge of programming languages such as C, C++, Java, or .NET.
• Strong understanding of Windows and Linux operating systems.

6. Security Standards & Frameworks

• OWASP
• NIST
• MITRE CWE
• CVSS

7. Communication & Reporting

• Strong verbal and written communication skills.
• Ability to create detailed technical reports and PoCs.
• Ability to learn quickly and adapt to emerging security threats.

Good-to-Have Skills

• Mobile application penetration testing for Android and iOS.
• Experience conducting security awareness sessions or training product teams.

Recruiter Screening Checklist

• 3–6 years of relevant penetration testing experience.
• Hands-on web application penetration testing.
• Hands-on thick client application penetration testing.
• Reverse engineering and dynamic analysis experience.
• Experience with Burp Suite, Nmap, Wireshark, and other relevant tools.
• Valid, relevant practical penetration testing certification.
• Knowledge of C/C++/Java/.NET and Windows/Linux.
• Understanding of OWASP, NIST, CWE, and CVSS.
• Strong PoC development, reporting, and communication skills.
• Important: Prioritize candidates with demonstrable thick client penetration testing and reverse engineering experience. Web application or mobile application testing alone is insufficient for this role.