Description

You will perform security assessments across mobile applications, web services, and APIs.

Responsibilities

• Test Android and iOS applications for vulnerabilities using static and dynamic analysis.
• Identify and exploit vulnerabilities in web applications and APIs, including business logic flaws and access control issues.
• Perform SSL/TLS interception and bypass techniques, including certificate pinning bypass.
• Develop custom tools and scripts to automate security testing workflows.

Required Skills

• 3+ years of hands-on experience with mobile application penetration testing (Android/iOS).
• 2+ years of experience with web and API penetration testing, understanding OWASP Top 10 and API Security Top 10.
• Proficiency in security tooling such as Burp Suite Pro, MobSF, Ghidra, and Frida.
• Strong scripting capabilities in Python, PowerShell, Bash, or Ruby.
• Deep understanding of authentication protocols (OAuth, SAML, JWT) and network fundamentals (TCP/IP, DNS).
• Experience with bypassing root/jailbreak detection and anti-tampering mechanisms in mobile apps.
• Familiarity with OWASP MASVS/MASTG and mapping test cases to MASVS levels.

Key Skills

Education

Any Gradute