Penetration Tester_ 2 To 5 years

Kiya.ai; Chennai District; Hybrid; INR 1,800,000 - 3,600,000; Full time

Job summary

Kiya.ai is seeking a hands-on Security / Penetration Tester based in Chennai to perform mobile, web, and API security assessments. You will test Android and iOS apps, web services, and backend APIs, identifying vulnerabilities and proposing actionable mitigations.

The role requires practical experience with manual and automated testing using Burp Suite, ZAP, and Kali Linux, plus strong knowledge of OWASP Top 10 and MASVS/MASTG.

Qualifications

• Hands-on security tester with mobile, web, and API testing focus.
• Experience with Android/iOS security testing, reverse engineering, and security analysis.
• Familiarity with Burp Suite, ZAP, and Kali Linux.

Skills

Mobile Penetration Testing

Web Penetration Testing

API Penetration Testing

Static & Dynamic Analysis

Reverse Engineering

OWASP Top 10

OWASP MASVS/MASTG

Tools

Burp Suite

OWASP ZAP

Kali Linux

MobSF

JADX

APKTool

dex2jar

ADB

Xcode

Job description

Hiring:Penetration tester for Mobile + Web + API penetration testing

Location: Chennai ( Prefers only chennai based profiles )
Experience: 25 Years
Notice Period: Immediate to Short Joiners

Role Overview

We are looking for a hands-on Security / Penetration Tester with strong expertise in Mobile, Web & API Penetration Testing. The candidate should have practical experience in Android & iOS security testing, reverse engineering, vulnerability assessment and security analysis.

Mandatory Skills

• Mobile Penetration Testing Android & iOS
• Web Application Penetration Testing
• API Penetration Testing
• Static & Dynamic Analysis – Android APK / iOS IPA
• Reverse Engineering & Client-Side Protection Bypass
• Burp Suite / OWASP ZAP / Kali Linux
• Strong understanding of OWASP Top 10 & OWASP MASVS/MASTG

Technical Expertise

• Android & iOS application security testing
• SAST / DAST and manual security testing
• APK/IPA analysis using MobSF, JADX, APKTool, dex2jar, ADB, Xcode
• Reverse engineering and binary analysis
• Frida, Objection, Magisk, Xposed and similar tools
• SSL Pinning, Root/Jailbreak Detection & Tamper Protection bypass
• Native library analysis (.so / .dylib)
• Vulnerability identification, validation, documentation & reporting
• Security test design and execution

Good to Have

• Source Code Assessment / SAST
• CSSLP / CEH or equivalent certification
• Thick Client Penetration Testing experience

What We’re Looking For

• Strong analytical and problem-solving skills
• Good understanding of application security risks
• Strong verbal & written communication
• Attention to detail
• Ability to work independently and collaboratively
• Passion for researching evolving mobile security threats