Senior Penetration Tester Mobile

O projekcie We are looking for a skilled Senior Penetration Tester with a strong focus on mobile application security testing and a solid understanding of web application security.

The primary focus of this role will be conducting hands-on security assessments of mobile applications across Android and iOS platforms. The ideal candidate should demonstrate strong practical mobile penetration testing skills, an analytical mindset and the ability to identify and investigate complex security vulnerabilities.

We are particularly interested in candidates holding the OSCP certification and having substantial hands-on experience in mobile application security testing. Good knowledge of web application penetration testing is also essential.

We value practical skills, technical expertise and the quality of the candidate's testing approach over a specific number of years of professional experience.

Zakres obowiązków

• Plan and perform manual and automated penetration tests of mobile applications, covering both Android and iOS.
• Identify and investigate security weaknesses in mobile application architecture, authentication, authorization, data storage, encryption and network communication.
• Conduct security assessments of web applications and APIs.
• Apply a combination of manual testing techniques and automated security tools to identify potential vulnerabilities.
• Analyse attack scenarios, validate findings and assess their potential business and technical impact.
• Develop proof-of-concept demonstrations where appropriate to support vulnerability validation.
• Prepare clear and comprehensive security assessment reports with practical remediation recommendations.
• Collaborate with development and security teams to support vulnerability resolution.
• Perform retesting to verify the effectiveness of implemented security fixes.
• Continuously improve testing methodologies, tools and technical practices.

Wymagania Requirements

• OSCP certification (highly preferred) or equivalent practical penetration testing expertise.
• Strong hands-on experience in mobile application penetration testing, particularly across Android and iOS platforms.
• Excellent understanding of mobile application security concepts, common vulnerabilities and attack techniques.
• Ability to independently plan and execute mobile security assessments using both manual and automated testing approaches.
• Good practical experience in web application penetration testing.
• Solid understanding of web application vulnerabilities, authentication mechanisms, authorization issues and API security.
• Familiarity with OWASP testing methodologies, including OWASP Mobile Top 10, OWASP MASVS and OWASP Top 10.
• Experience with commonly used mobile and web security testing tools.
• Strong analytical and problem-solving skills, with the ability to investigate vulnerabilities beyond automated scanner results.
• Ability to communicate technical findings clearly and provide actionable remediation guidance.
• Good written and spoken English.

Nice to have

• Experience in network and infrastructure penetration testing.
• Knowledge of cloud security and Active Directory.
• Experience with source code reviews and security assessments of application architecture.
• Scripting and automation skills.
• Knowledge of additional penetration testing methodologies and frameworks.

Candidate profile

The ideal candidate is a hands-on security professional with a genuine specialisation in mobile application penetration testing.

We are looking for someone who understands how to approach mobile security assessments, can independently identify and investigate vulnerabilities, and has the technical skills to go beyond basic automated testing.

Strong mobile testing capabilities are the main priority for this position, complemented by good web application security knowledge.

We do not define suitability solely by the number of years of experience. We place greater emphasis on practical technical capabilities, the quality of the candidate's testing approach and the ability to deliver meaningful security findings.