Security Testing | Technical Lead

CitiusTech; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

CitiusTech in Bengaluru, India, is looking for an experienced Mobile Security Tester to conduct thorough security testing of mobile applications (Android and iOS), including static and dynamic analysis, penetration testing, and vulnerability scanning.

You will perform SOUP validation for third-party components and open-source libraries, document findings with actionable remediation, and work with development, QA, and product teams to embed security into the SDLC.

Qualifications

• Experience in mobile security testing across Android and iOS.
• Ability to conduct static and dynamic analysis and vulnerability assessments.
• Experience with SOUP validation testing for third-party components.
• Familiarity with secure coding practices for mobile apps.
• Knowledge of Flutter, React Native security implications.
• Experience with security testing tools (Burp Suite, OWASP ZAP, MobSF).
• Ability to document vulnerabilities with actionable remediation steps.
• Collaborate with Dev, QA, and product teams to integrate security into SDLC.

Responsibilities

• Conduct thorough security testing of mobile applications, including static and dynamic analysis, penetration testing, and vulnerability scanning.
• Identify and document security vulnerabilities and risks, providing detailed reports with actionable recommendations for remediation.
• Conduct SOUP validation security testing for the 3rd party components and open-source libraries.
• Understanding of secure coding practices for mobile applications to prevent common vulnerabilities.
• Familiarity with popular mobile development frameworks and their security implications (e.g., Flutter, React Native).
• Utilize and manage security testing tools and frameworks (e.g., Burp Suite, OWASP ZAP, MobSF) to assess mobile application security.
• Perform reverse engineering and code analysis to uncover security weaknesses and potential exploits.
• Work closely with development, QA, and product teams to integrate security testing into the software development lifecycle (SDLC).

Skills

Mobile security testing

Static analysis

Dynamic analysis

Penetration testing

Vulnerability scanning

SOUP validation

Secure coding practices

SDLC security

Flutter security

React Native security

Tools

Burp Suite

OWASP ZAP

MobSF

Job description

• Mobile (Android & iOS) Security Testing 'Mobile (Android & iOS) Security Testing SOUP Security Testing (of the 3rd party components and open-source libraries)
• API security
• Application Security
• Experience in healthcare domain
• Experience with security testing tools and frameworks

Roles and Responsibilities :

• Conduct thorough security testing of mobile applications, including static and dynamic analysis, penetration testing, and vulnerability scanning.
• Identify and document security vulnerabilities and risks, providing detailed reports with actionable recommendations for remediation.
• Conduct SOUP validation security testing for the 3rd party components and open-source libraries.
• Understanding of secure coding practices for mobile applications to prevent common vulnerabilities.
• Familiarity with popular mobile development frameworks and their security implications (e.g., Flutter, React Native).
• Utilize and manage security testing tools and frameworks (e.g., Burp Suite, OWASP ZAP, MobSF) to assess mobile application security.
• Perform reverse engineering and code analysis to uncover security weaknesses and potential exploits.
• Work closely with development, QA, and product teams to integrate security testing into the software development lifecycle (SDLC).'