Mobile Application Penetration Tester (iOS & Android)

The Mobile Application Penetration Tester will conduct end-to-end penetration testing of iOS and Android mobile applications, including static, dynamic, and runtime analysis. Responsibilities include assessing mobile API integrations, authentication mechanisms, encryption protocols, and data storage security, as well as identifying and exploiting vulnerabilities such as insecure data storage, weak cryptography, insecure communication, jailbreak/root bypasses, insecure code practices, and business logic flaws. The role involves using runtime instrumentation frameworks for dynamic testing and bypassing protections, performing certificate pinning bypass, hooking, and traffic interception, and evaluating evasion of mobile app protections. Additionally, the tester will develop custom scripts/exploits, produce comprehensive penetration test reports with remediation steps, work with development and research security teams to embed secure SDLC practices, and contribute to Red Team exercises by simulating adversarial attacks.