Android Penetration Tester

The Fountain Group; Mountain View, California, Greendale (CA, MO, WI); Hybrid; USD 89,544 - 96,432; Full time

Benefits offered by this job

Health insurance

Vision insurance

Dental insurance

Life insurance

Disability insurance

Job summary

A leading staffing firm is seeking a Penetration Tester with a focus on Android applications. The ideal candidate will have at least 5 years of experience in penetration testing and demonstrate proficiency in Java and Python. This hybrid role requires being onsite 3 days a week in Mountain View and offers competitive pay along with a suite of benefits.

Qualifications

• 5+ years experience in penetration testing, including 2+ years in Android.
• Certifications in offensive security are a plus.
• Comprehensive knowledge of attack vectors and threat protection methods.

Responsibilities

• Conduct vulnerability assessments and penetration tests on Android platforms and applications.
• Develop exploits for zero-day vulnerabilities and conduct penetration tests on IoT devices.
• Assist in creating and maintaining internal penetration testing practices.

Skills

Penetration Testing

Java

Python

Security Practices

Malware Development

Education

Degree in Cybersecurity or related discipline

Tools

OSCP

OSWA

OSWE

CRTO

BSCP

Job description

Pay: $65-70/hour W2. Our company offers our consultants a suite of benefits after a qualification period including health, vision, dental, life, and disability insurance.

Hybrid role, must be onsite 3x/week in Mountain View, CA

W2 Candidates only

Manager Notes

• This role focuses on Pen Testing for Mobile Applications and Android APK Level. Previous interviews have been too focused on web applications and missing the Android component.
• Hybrid role – 3 days onsite.
• Must be able to read and understand Java & Python, as Java is the native language of Android.

Responsibilities

• Develop expertise in our product solutions, deep diving into design/architecture, and execute white box and black box penetration scenarios.
• Plan, scope, and conduct vulnerability assessments and penetration tests on internal/external assets such as web applications, Android platforms, Android apps, backend APIs, and cloud services.
• Research and conduct adversary simulations for known security threats and identify client attack vectors to test system security readiness.
• Conduct threat modeling, threat intelligence, and scoping with stakeholders.
• Assist in creating and maintaining internal penetration testing practices within the QA team, managing vulnerabilities and tracking until closure.
• Build test harnesses and automation suites, and validate attack vectors in Threat Lab.
• Coordinate with program management and security architects at internal and offshore sites.
• Stay up to date on current tools, technologies, and vulnerabilities to incorporate into testing practices.
• Research and develop exploits for zero-day vulnerabilities.
• Conduct penetration tests on IoT and firmware devices.

Requirements

• 5+ years of experience in penetration testing, including 2+ years in Android and 1+ year in web applications.
• Degree in cybersecurity or related security disciplines is a plus.
• Certifications in offensive security such as OSCP, OSWA, OSWE, CRTO, BSCP, or similar are a plus.
• Comprehensive knowledge of information security practices, malware, phishing attacks, attack vectors, and threat protection methods.
• Proficiency in Java, Python, or relevant programming languages.
• Malware development or reverse engineering experience is a plus.

Who We Are

The Fountain Group is a nationwide staffing firm with over 80 Fortune 100-500 clients. Since 2001, TFG has maintained a standard of excellence, recognized through numerous industry awards. Our success is a team effort.

Visit our website for more information: The Fountain Group

3407 W Martin Luther King Jr. Dr. Tampa, FL 33607

“We work in Life Sciences, Clinical, Engineering, IT, and more. Above all, we specialize in people.”