Mobile Application Penetration Testing Analyst

Evolution Project Consulting; United Kingdom; Remote; GBP 80,000 - 100,000; Part time

Job summary

A leading consulting firm is seeking an experienced Application Security Analyst to join their team on a freelance basis. The role focuses on security testing for web and Flutter-based mobile applications, emphasizing vulnerability identification without exploitation. Successful candidates will have a strong background in application security, particularly with Flutter, and will work independently in a flexible, remote environment, supporting various projects over the long term.

Qualifications

• Minimum 4–6 years of experience in application security testing.
• Strong background in Flutter security, with hands-on testing of production-grade mobile apps.
• Certifications like OSCP, eWPT, GMOB, or equivalent are a plus.

Responsibilities

• Conduct manual and tool-assisted penetration testing of web and mobile applications.
• Identify vulnerabilities related to authentication, authorization, session handling, and insecure storage.
• Document findings in detailed, developer-ready reports.

Skills

Application Security Testing

Flutter Security

Technical Writing

Tools

Burp Suite

OWASP ZAP

MobSF

Frida

Postman

Job description

1 week ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from Evolution Project Consulting

Head of Resourcing & Operations | Specialist Talent for Digital & Technology Disputes | eDiscovery | Forensic Tech | Expert Witness…

Job Title

Job Type:

Contract / Freelance

Long-Term Engagement (Part-Time, Sporadic Hours)

Fully Remote

About the Role:

We are looking for an experienced Application Security Analyst to join us on a freelance basis, supporting security testing across both web and mobile applications, with a strong emphasis on Flutter-based mobile apps. This is a non-exploit role, focused on identifying vulnerabilities and security weaknesses—not active exploitation or red teaming.

The role is fully remote and well-suited for professionals who are comfortable working independently on a long-term, as-needed basis. Hours will vary with workload, so flexibility and the ability to work asynchronously are key.

Key Responsibilities:

• Conduct manual and tool-assisted penetration testing of web and mobile (Flutter) applications
• Identify vulnerabilities related to authentication, authorization, session handling, and insecure storage or communications
• Perform reviews of Dart/Flutter code and assess mobile-specific risks like deep linking, reverse engineering, and tampering
• Analyze APIs and backend integrations for security gaps
• Document findings in detailed, developer-ready reports including impact assessments and remediation guidance
• Collaborate with internal teams to clarify security concerns and verify remediations
• Align all assessments with OWASP Top 10, OWASP MASVS, and secure coding best practices
• Operate in a non-exploitative capacity (no red teaming or social engineering)

Required Experience and Skills:

• Minimum 4–6 years of experience in application security testing
• Strong background in Flutter security, with hands-on testing of production-grade mobile apps
• Proficiency in tools such as Burp Suite, OWASP ZAP, MobSF, Frida, Postman, Objection, or similar
• Familiarity with mobile and web security standards (OWASP Top 10, MASVS, CVSS, CWE)
• Excellent technical writing and reporting skills
• Certifications like OSCP, eWPT, GMOB, or equivalent are a plus
• Experience working as an external security consultant or independent contractor
• Familiarity with CI/CD security practices and DevSecOps pipelines
• Ability to scope and prioritize assessments autonomously

Compensation and Workload:

• Competitive hourly or daily rate
• Project-based workload, long-term commitment

If this position is of interest then please apply and await a call from Dylan. Alternatively please send an email to [e-mail] with your mobile number and availability for a call.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Other

Job function

• Job function

  Information Technology

• Industries

  Information Services and Computer and Network Security

Referrals increase your chances of interviewing at Evolution Project Consulting by 2x

Sign in to set job alerts for “Application Analyst” roles.

Senior Technical Business Analyst (m/f/d)

Leeds, England, United Kingdom 6 days ago

Reading, England, United Kingdom 3 weeks ago

Freelance Data Analyst (Python) - AI Trainer

Technical Business Analyst (Contract) - EdTech

Greater London, England, United Kingdom 3 weeks ago

Business Analyst - Transformation – Midlands/Remote

City Of London, England, United Kingdom £500.00-£597.00 5 days ago

Clinical Data Visualization & Reporting Analyst

Business Applications Analyst - CRM - REMOTE (UK)

Business Analyst (Regulatory Reporting Functional)

Glasgow City, Scotland, United Kingdom 1 day ago

Graduate Research Assistant - Data Analyst: Migration

Law, Scotland, United Kingdom 3 months ago

Senior Business Applications Analyst - Voyager - REMOTE (UK)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.