Description

We are looking for an Android App Penetration Tester with expertise in OWASP Mobile Security Testing Guide (MSTG) standards. You should be familiar with Android security concepts such as Root Detection, Certificate Pinning, ProGuard/R8, and Android Security Model. iOS penetration testing expertise is considered a plus. This position is suitable for individuals passionate about mobile security and Android application penetration testing.

Responsibilities

• Perform manual and automated penetration tests on Android applications
• Identify and analyze security vulnerabilities based on MSTG
• Assess Android Security Model and Permission System security
• Review Root Detection, Certificate Pinning, and Anti-Tampering Mechanisms
• Test ProGuard/R8 Obfuscation and Reverse Engineering
• Assess Storage Security and Data Protection
• Use penetration testing tools: APKTool, JADX, Frida, ADB, Drozer
• Prepare detailed reports and provide security solutions

Requirements

• Minimum 3 years of experience in Android application penetration testing
• Strong knowledge of OWASP Mobile Security Testing Guide (MSTG) standards
• Experience with Android penetration testing tools: APKTool, JADX, Frida, ADB, Drozer, MobSF
• Familiarity with Android security concepts: Root Detection, Certificate Pinning, ProGuard/R8, Android Security Model
• Ability to perform Reverse Engineering of Android applications
• Familiarity with Java and Kotlin
• Experience with Android Studio and Android Development Tools

Preferred (Optional)

• Mobile security certifications: OWASP Mobile Security
• Experience in iOS application penetration testing (major plus)
• Familiarity with Android Rooting and Bypass Techniques
• Experience in security assessment of Enterprise Android Apps
• Skills in using Static and Dynamic Analysis tools

Skills

Experience: 3-5 years