Senior Penetration Tester Mobile

250 - 300 PLN/ godz./ godz.B2BB2B (netto)

SeniorZdalnieFull-time·B2B

#474616·Dodano wczoraj·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

Mobile PentestSecurityTestingAndroid iOSOSCPWeb applicationsManual TestingAutomated testingAPIOWASPWeb securityPythonCloud securityActive Directory Go Golang

Podsumowanie oferty

Conduct hands-on mobile application security assessments across Android and iOS, identifying and investigating vulnerabilities. The role also covers security assessments of web applications and APIs.

Wymagania

Strong hands-on experience in mobile application penetration testing, particularly across Android and iOS.
Understanding of mobile application security concepts, common vulnerabilities and attack techniques.
Ability to independently plan and execute mobile security assessments using manual and automated testing approaches.
Practical experience in web application penetration testing.
Understanding of web application vulnerabilities, authentication mechanisms, authorization issues and API security.
Familiarity with OWASP testing methodologies, including OWASP Mobile Top 10, OWASP MASVS and OWASP Top 10.
Experience with commonly used mobile and web security testing tools.
Ability to investigate vulnerabilities beyond automated scanner results.
Ability to communicate technical findings and provide remediation guidance.
Good written and spoken English.

Nice to have:

OSCP certification or equivalent practical penetration testing expertise (highly preferred).
Experience in network and infrastructure penetration testing.
Knowledge of cloud security and Active Directory.
Experience with source code reviews and security assessments of application architecture.
Scripting and automation skills.
Knowledge of additional penetration testing methodologies and frameworks.

Obowiązki

Plan and perform manual and automated penetration tests of mobile applications across Android and iOS.
Identify and investigate security weaknesses in mobile application architecture, authentication, authorization, data storage, encryption and network communication.
Conduct security assessments of web applications and APIs.
Apply manual testing techniques and automated security tools to identify potential vulnerabilities.
Analyse attack scenarios, validate findings and assess their potential business and technical impact.
Develop proof-of-concept demonstrations where appropriate to support vulnerability validation.
Prepare security assessment reports with remediation recommendations.
Collaborate with development and security teams to support vulnerability resolution.
Retest to verify the effectiveness of implemented security fixes.
Improve testing methodologies, tools and technical practices.

Link Group

563 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz