Senior Mobile App Penetration Tester

Sii Poland; Kraków; Hybrid; PLN 260,000 - 360,000; Full time

Benefits offered by this job

Great Place to Work

Profit sharing

Centre of internal trainings

Many experts you can learn from

Open and accessible management team

Regular integration events and trips

Comfortable and well-equipped offices

MySii app

Medical care

Job summary

Sii Poland is seeking a Principal Mobile Application Penetration Tester to join our global cybersecurity team in Cracow with a hybrid work setup. You will lead end-to-end mobile security assessments, shaping methodologies, and guiding stakeholders through risk-based remediation.

The role requires 5+ years of hands-on mobile pen-testing experience, deep knowledge of MASVS/MSTG, and strong English. You will collaborate with global leads to improve frameworks, tooling, and testing playbooks while

Qualifications

• 5+ years of hands-on penetration testing experience, with a strong focus on mobile application security.
• Practical experience testing iOS and Android applications, including common mobile attack paths and platform-specific risks
• Strong expertise in mobile security plus at least one additional domain: web applications or infrastructure
• Solid understanding of common vulnerabilities, attack techniques, and application security principles
• Strong grasp of TCP/IP fundamentals and network security concepts
• Confident using both manual and automated testing techniques
• Ability to explain complex technical issues to non-technical audiences clearly and calmly
• Strong analytical thinking and problem-solving skills
• Experience with scripting or programming languages
• Knowledge of OWASP mobile standards such as MASVS and MSTG
• Advanced level of English

Responsibilities

• Leading end-to-end mobile application penetration tests, including scoping, planning, execution, and reporting
• Delivering clear, high-quality outputs with practical remediation guidance and well-articulated risk assessments
• Acting as the go-to escalation point for complex technical challenges and high-impact findings
• Setting and evolving mobile testing methodologies, playbooks, and quality standards across the team
• Partnering with global penetration testing leads to aligning ways of working and sharing insights across regions
• Contributing to the improvement of frameworks, tooling, automation, and best practices with a strong focus on mobile security
• Building and maintaining an internal knowledge base of findings, trends, and lessons learned
• Supporting the vulnerability management lifecycle, including tracking, remediation, and risk acceptance
• Assisting in incident response and security investigations when needed
• Staying ahead of emerging attack vectors, tools, and techniques, especially in the mobile space

Skills

Mobile security

iOS/Android testing

Web or infrastructure security

Vulnerability assessment

TCP/IP fundamentals

Manual & automated testing

Explain complex issues clearly

Analytical thinking

Scripting / programming

MASVS / MSTG knowledge

Advanced English

Tools

Corellium

SAST

DAST

IAST

Java / Kotlin / Swift / Objective-C

OAuth2/JWT/biometrics/SSL pinning

Cloud architectures

Job description

Sii Poland is seeking a Principal Mobile Application Penetration Tester to join our global cybersecurity team in Cracow with a hybrid work setup. You will lead end-to-end mobile security assessments, shaping methodologies, and guiding stakeholders through risk-based remediation.

The role requires 5+ years of hands-on mobile pen-testing experience, deep knowledge of MASVS/MSTG, and strong English. You will collaborate with global leads to improve frameworks, tooling, and testing playbooks while