Security Analyst - Mobile

ValueMentor; Thrissur; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ValueMentor seeks a Senior Security Consultant specializing in Mobile Application Security Testing. You will lead hands-on assessments of Android, iOS, and hybrid apps, perform multiple testing methodologies, and mentor junior staff while delivering remediation guidance.

You will evaluate API security, cryptography controls, and secure architecture, reporting findings to technical and management stakeholders.

Qualifications

• Experience in leading mobile app security testing engagements.
• Hands-on testing across Android and iOS platforms.
• Knowledge of OWASP Mobile Top 10 and MASVS standards.

Responsibilities

• Lead and execute advanced Android and iOS security assessments.
• Perform black-box, gray-box, and white-box testing of mobile apps.
• Conduct static and dynamic security testing of apps.
• Perform reverse engineering and binary analysis as needed.
• Assess APIs and backend services for security flaws.
• Evaluate authentication, session management, and data protection.
• Identify vulnerabilities, validate exploitability, and assess business impact.
• Review app architecture and mobile security controls; conduct code reviews where needed.
• Prepare technical reports and executive summaries; present findings to stakeholders.
• Mentor junior consultants and contribute to research and tooling.

Skills

Android security testing

iOS security testing

Mobile security testing

Static analysis

Dynamic analysis

Reverse engineering

API security

OWASP MASVS

OWASP MSTG

Threat modeling

Job description

Key Responsibilities

The Senior Security Consultant – Mobile Application Security Testing will be responsible for leading and executing advanced security assessments of Android, iOS, and hybrid mobile applications. The role requires strong hands-on experience in mobile application penetration testing, mobile platform security, API security, and secure mobile application architecture reviews. The consultant will conduct comprehensive manual security testing, identify security vulnerabilities, assess business impact, provide remediation guidance, and mentor junior team members.

• Lead and execute advanced Android and iOS application security assessments.
• Perform black-box, gray-box, and white-box mobile application penetration testing.
• Conduct static and dynamic security assessments of mobile applications.
• Perform reverse engineering and binary analysis of mobile applications.
• Assess mobile application APIs and backend services.
• Evaluate authentication, authorization, session management, cryptographic controls, and data protection mechanisms.
• Identify vulnerabilities, validate exploitability, and assess business impact.
• Assess mobile applications against OWASP Mobile Top 10 and MASVS requirements.
• Analyze application communication channels and API interactions.
• Review application architecture and mobile security controls.
• Conduct secure code review for mobile applications where required.
• Validate remediation activities and perform retesting.
• Prepare detailed technical reports and executive summaries.
• Present findings and recommendations to technical and management stakeholders.
• Mentor junior consultants and conduct peer reviews of assessment reports.
• Contribute to mobile security research, testing methodologies, and tool development.

Key Skills

• Strong experience testing both Android and iOS applications.
• Extensive knowledge of:
• OWASP Mobile Top 10
• OWASP MASVS
• OWASP MSTG
• Mobile threat modeling concepts
• Experience identifying vulnerabilities including:
• Insecure Data Storage
• Weak Authentication
• Broken Authorization
• Insecure Communication
• Improper Certificate Validation
• SSL Pinning Bypass
• Reverse Engineering Weaknesses
• Code Tampering Risks
• Cryptographic Weaknesses
• Runtime Manipulation Risks
• API Security Vulnerabilities

Key Competencies

• Accountability
• Communications - Oral & Written
• Analysis Skills
• Passion
• Adaptability