Link Group

Senior Penetration Tester (Mobile)

Brak informacji o wynagrodzeniu

SeniorZdalnieFull-time

#474671·Dodano 10 dni temu·6

Źródło: LinkGroup

Aplikuj teraz

Tech Stack / Keywords

OSCPAndroid iOS OWASPOWASP Mobile Top 10OWASP MASVSOWASP Top 10APIActive Directorycloud security

Podsumowanie oferty

Conduct mobile application security assessments across Android and iOS, with additional work on web applications and APIs. The role focuses on identifying and validating vulnerabilities through manual and automated penetration testing.

Wymagania

OSCP certification or equivalent practical penetration testing expertise; OSCP is highly preferred.
Strong hands-on experience in mobile application penetration testing, particularly across Android and iOS.
Excellent understanding of mobile application security concepts, common vulnerabilities and attack techniques.
Ability to independently plan and execute mobile security assessments using manual and automated testing approaches.
Good practical experience in web application penetration testing.
Solid understanding of web application vulnerabilities, authentication mechanisms, authorization issues and API security.
Familiarity with OWASP testing methodologies, including OWASP Mobile Top 10, OWASP MASVS and OWASP Top 10.
Experience with commonly used mobile and web security testing tools.
Strong analytical and problem-solving skills, including the ability to investigate vulnerabilities beyond automated scanner results.
Ability to communicate technical findings clearly and provide actionable remediation guidance.
Good written and spoken English.

Nice to have:

Experience in network and infrastructure penetration testing.
Knowledge of cloud security and Active Directory.
Experience with source code reviews and security assessments of application architecture.
Scripting and automation skills.
Knowledge of additional penetration testing methodologies and frameworks.

Obowiązki

Plan and perform manual and automated penetration tests of mobile applications across Android and iOS.
Identify and investigate weaknesses in mobile application architecture, authentication, authorization, data storage, encryption and network communication.
Conduct security assessments of web applications and APIs.
Use manual testing techniques and automated security tools to identify potential vulnerabilities.
Analyse attack scenarios, validate findings and assess their potential business and technical impact.
Develop proof-of-concept demonstrations where appropriate to support vulnerability validation.
Prepare security assessment reports with practical remediation recommendations.
Collaborate with development and security teams to support vulnerability resolution.
Retest to verify the effectiveness of implemented security fixes.
Improve testing methodologies, tools and technical practices.

Link Group

532 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz