Description
Mobile Application SecurityPerform security assessments and reverse engineering (APK/IPA static analysis) for iOS and Android.Test runtime protections (SSL pinning, root/jailbreak detection) and perform dynamic analysis using Frida, Objection, and Burp.Validate compliance against OWASP MASVS and secure implementations of OAuth, tokens, and local storage.Hands-On Engineering & AutomationConduct manual and automated code reviews.Implement and tune SAST, DAST, and SCA tools, alongside API and container security scanning.Build and enforce CI/CD security gates and work directly with developers to patch code/pipelines.Threat Modeling & ValidationConduct practical threat modeling focusing on real exploitability rather than theoretical risks.Validate vulnerabilities through hands-on testing using tools like Burp Suite and OWASP ZAP. Experience Level: 7+ years in Cybersecurity with a heavy focus on Application Security.Education: Bachelor’s degree in Cybersecurity or a related field.Core Core Experience:Proven background in Secure SDLC within delivery-focused projects.Experience operating within fixed-price or commitment-based environments, balancing security with tight timelines and budgets.Proven ability to personally fix vulnerabilities in code/pipelines and demonstrate actual exploit paths.Certifications:Management/Architecture: CISSP and/or CSSLPHands-on/Offensive: OSCP, GWAPT, eWPT, or eWPTXNice-to-Have SkillsCloud security expertise (AWS, Azure, or GCP).Kubernetes and container security.Experience working within regulated industries.