Mobile Application Security Tester (MAST)

Must Have Skills –

Mobile application security testing – 2+Years
Android and iOS security testing methodologies and tools: 2-Years
(Now Secure, MobSF, Frida, Burp Suite, Drozer, Ghidra, and similar for security assessments)
mobile app architecture, API security, and secure coding practices: 3+ Years

Manual Testing : 8+ Years
Mobile Application Security Tester (MAST) to assess and enhance the security of mobile applications (Android & iOS). Have hands-on experience with dynamic, static, and behavioral analysis of mobile apps and will be responsible for identifying and mitigating security vulnerabilities.

Key Responsibilities:

Conduct Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) on mobile applications.
Perform reverse engineering, penetration testing, and runtime analysis to identify security flaws.
Analyze mobile app permissions, API security, and cryptographic implementations to detect vulnerabilities.
Use tools like NowSecure, MobSF, Frida, Burp Suite, Drozer, Ghidra, and similar for security assessments.
Test Android and iOS applications for OWASP Mobile Top 10 vulnerabilities.
Review network traffic, data storage, and authentication mechanisms for potential risks.
Work with development and DevSecOps teams to integrate security best practices in CI/CD pipelines.
Document findings and provide detailed remediation guidance to developers and stakeholders.
Stay updated with emerging mobile security threats, vulnerabilities, and industry trends

Required Skills & Qualifications:

Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field.
2 years of experience in mobile application security testing.
Hands-on experience with Android and iOS security testing methodologies and tools.
Knowledge of mobile app architecture, API security, and secure coding practices.
Strong understanding of encryption, obfuscation, and code signing techniques.
Experience with Jailbreak/Root detection bypass techniques.
Familiarity with MITM attacks, SSL pinning bypass, and mobile forensics.
Work with clients to communicate and explain the findings and support in remediation.
Certifications like OSCP, eMAPT, GMOB, or similar are a plus.

Job Type: Contract

Pay: $50.00 - $70.00 per hour

Expected hours: 40 per week

Schedule:

8 hour shift
Monday to Friday

Work Location: Remote

Aphrosoft Technologies jobs

Mobile Application Security Tester