Mobile Application Penetration Tester (iOS & Android) - Remote

Overview

Zimperium® is an industry leader in enterprise mobile security, being the first and only company to provide a complete mobile threat defense system that offers real-time, on-device world-class protection against both known and unknown next generation of advanced mobile cyberattacks and malware.

In Short

• Conduct end-to-end penetration testing of iOS and Android mobile applications.
• Assess mobile API integrations, authentication mechanisms, encryption protocols, and data storage security.
• Identify and exploit vulnerabilities in mobile applications.
• Use runtime instrumentation frameworks for dynamic testing.
• Perform certificate pinning bypass and traffic interception.
• Evaluate mobile app protections against evasion techniques.
• Develop custom scripts/exploits for advanced testing scenarios.
• Produce comprehensive penetration test reports.
• Work closely with development and security teams.
• Contribute to Red Team exercises.

Requirements

• 5+ years of experience in penetration testing.
• Strong knowledge of OWASP Mobile Top 10 and NIST mobile security guidelines.
• Expertise in static & reverse engineering tools.
• Experience with dynamic & runtime testing tools.
• Solid understanding of mobile OS internals.
• Hands-on experience with jailbroken and rooted devices.
• Familiarity with cryptography and secure communications.
• Ability to think like an attacker.

Benefits

• Be part of an industry-leading company in mobile security.
• Opportunity to work on advanced mobile security technologies.
• Collaborate with a skilled team of professionals.
• Engage in continuous learning and professional development.
• Flexible working environment.