Remote Mobile App Security Penetration Tester II

NetSPI Inc.; Minneapolis (MN); On-site; USD 110,000 - 150,000; Full time

Job summary

NetSPI Inc. is seeking a Security Consultant II to conduct thorough penetration testing of mobile applications and APIs, delivering clear, actionable reports and recommendations to strengthen client security postures.

You will research and deploy modern testing approaches while collaborating with clients to meet timelines. The role requires 2–3 years of mobile pentesting experience, knowledge of OWASP Top 10, and proficiency with tools like Burp Suite and Frida.

Qualifications

• Bachelor’s degree or higher in CS, Engineering, Math, or IT or equivalent experience.
• 2–3 years of mobile application penetration testing experience.
• Familiarity with offensive tools (Kali, Burp, Frida, Drozer, Objection, Ghidra).
• Experience developing Frida tools to bypass protections or exploit vulnerabilities.
• Understanding of mobile data security, communications, and sandboxes.

Responsibilities

• Conduct penetration testing engagements on mobile apps and APIs.
• Identify insecure data storage, communications, or cryptography in mobile apps.
• Create and deliver penetration testing reports with clear recommendations.
• Develop techniques, tools, and methodologies for pentesting services.
• Perform day-to-day consulting tasks to ensure smooth operations.

Skills

Mobile pentesting

Kali Linux

Burp Suite

Frida

Ghidra

OWASP Top 10

Windows/Linux/macOS

Communication skills

Travel readiness

Education

Bachelor’s degree or higher

Tools

Kali Linux

Burp Suite

Frida

Drozer

Objection

Ghidra

Job description

NetSPI Inc. is seeking a Security Consultant II to conduct thorough penetration testing of mobile applications and APIs, delivering clear, actionable reports and recommendations to strengthen client security postures.

You will research and deploy modern testing approaches while collaborating with clients to meet timelines. The role requires 2–3 years of mobile pentesting experience, knowledge of OWASP Top 10, and proficiency with tools like Burp Suite and Frida.