Mobile Security Evaluator

Applus+ Laboratories; Cerdanyola del Vallés; Presencial; EUR 28.000 - 38.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

23 vacation days

Employee parking

Wellness activities

Subsidized menu

Descripción de la vacante

Applus+ Laboratories in Spain is seeking a Junior Mobile Security Engineer to join our CYBERSECURITY laboratory and perform security assessments focused on Android and iOS apps and devices. You will contribute to evaluations meeting certification requirements and support R&D on mobile attack techniques and tooling.

Requirements include a technical background, 0–2 years of experience, and fluency in Spanish and English (min B2). This is a full-time role with opportunities to grow.

Formación

• Educational background in computer science, telecommunications, electronics, or related field.
• 0–2 years of experience in the same position.
• Fluency in Spanish and English (min B2).
• Strong analytical and communication skills.

Responsabilidades

• Analyze customer's technological solutions.
• Perform ad-hoc evaluations per customer constraints.
• Conduct security evaluations for certification standards (EMVCo SBMP, PCI MPoC).
• Evaluate mobile devices, e.g., Android and iOS platforms.
• Perform security analyses, including secure code reviews and high assurance VA.
• Undertake mobile network attack tests (MitM).
• Conduct advanced penetration testing using reverse engineering and tooling.
• Write technical reports and engage with customers and stakeholders.

Conocimientos

Python

C/C++

Kotlin

Swift

Java

Educación

Technical degree in CS/Telecom/Electronics/Math

Herramientas

Frida

IDA

JEB

JDB

Descripción del empleo

We are Applus+ Laboratories, the division of the Applus+ Group that provides testing, certification, and product development engineering services.

In the CYBERSECURITY laboratory, we are accredited to perform a wide range of security evaluations for payment schemes, identification, and IT security.

We are looking for a Junior Mobile Security Engineer to join our team and participate in technical security assessments focused on Android and iOS applications and devices. You will contribute to security evaluations following certification requirements, perform mobile application testing, and support internal R&D initiatives focused on mobile attack techniques, tooling, and automation.

Essential job responsibilities

• Analyze customer's technological solutions.
• Perform ad-hoc evaluations, subject to customer constraints and needs.
• Conduct security evaluations in compliance with certification standards, primarily for EMVCo SBMP and PCI MPoC certifications.
• Conduct security evaluations for mobile devices, for example Android and IOS platforms.
• Perform advanced technical security analyses, including:
• Secure source code reviews for different components of payment systems.
• High Assurance Vulnerability Analysis (VA).
• Perform mobile network attacks such as Man in the Middle (MitM).
• Advanced penetration testing using reverse engineering, hooking, debugging, patching techniques.
• Write technical reports and communicate effectively with customers, testing laboratories, and other stakeholders.

To be considered, candidates must possess

• Education: Technical background such as Computer Science, Telecommunication, Electronics, Mathematics or equivalent degree.
• Coding experience with Python / C / C++, Kotlin, Swift, Java…
• 0-2 years of experience in the same position
• Languages: Spanish and English (at least B2)
• Strong analytical and communication skills

Nice to have

• Experience with Android or iOS applications
• Hands-on experience with software attack analysis and defense mechanisms on iOS/Android platforms
• Experience with hacking tools such as Frida, IDA, JEB, JDB, Magisk or equivalent
• Knowledge of penetration testing, reverse engineering, at least at theoretical level
• Knowledge of OWASP, NIST, PCI, ISO, COBIT.
• Knowledge of application obfuscation or hardening techniques.
• Experience with Cross-site scripting, SQL injections, Exploiting, etc.
• Certifications such as CompTIA Security+, eJPT and CEH.

Our current stack and tools

• Programming Language, Python, C/ C++
• Hacking tools such as Frida, IDA, JEB, JDB, Magisk
• Git
• Operative Systems, UNIX Based OS
• Permanent contract.
• Full-time position.
• 23 vacation days and 3 personal days.
• Employee parking.
• Green spaces and wellness activities, including yoga classes, to promote well-being.
• Subsidized menu with reduced prices.

Are you passionate about cybersecurity? Do you want to be part of a team of top experts? This is the company for you!

Applus+ Laboratories is an equal opportunity employer. We are committed to evaluating all applications equally based on skills, achievements, and experience, regardless of race, nationality, gender, age, disability, sexual orientation, gender identity, or any other classification protected by law.