Senior Mobile App Security Lead

Catalyic Security; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Catalyic Security is seeking a Senior Mobile Application Security Tester to lead security assessments of Android and iOS apps and their APIs. You will uncover vulnerabilities through hands-on testing and code review, deliver remediation guidance, and mentor junior testers on the team.

You will test end-to-end mobile platforms, perform API security testing, review source code for security weaknesses, and document findings with clear recommendations.

Qualifications

• 5+ years of experience in mobile application security testing.
• Strong hands-on experience with both Android and iOS platforms.
• Proficiency with Frida, Objection, MobSF, Burp Suite, and Jadx.
• Experience with static and dynamic analysis, including rooted and jailbroken device testing.
• Solid understanding of API security and OWASP API Top 10.
• Strong report writing and technical communication skills.
• Ability to lead assessments and manage multiple projects.

Responsibilities

• Lead end-to-end security testing of Android and iOS applications.
• Perform API security testing for mobile backends.
• Conduct source code reviews and vulnerability assessments, including insecure data storage and cryptography; authentication, authorization, session management; network communication and certificate pinning; reverse engineering and tampering.
• Test against OWASP Mobile Top 10 and OWASP MASVS.
• Document findings in clear, actionable technical reports.
• Recommend fixes and verify remediation with development teams.
• Mentor junior testers on mobile testing methodology and tooling.

Skills

Mobile security testing

Android testing

iOS testing

Threat modeling

Education

Bachelor's degree in Cyber Security

eMAPT

PMPA

Tools

Frida

Objection

MobSF

Burp Suite

Jadx

Job description

Catalyic Security is seeking a Senior Mobile Application Security Tester to lead security assessments of Android and iOS apps and their APIs. You will uncover vulnerabilities through hands-on testing and code review, deliver remediation guidance, and mentor junior testers on the team.

You will test end-to-end mobile platforms, perform API security testing, review source code for security weaknesses, and document findings with clear recommendations.