Principal Mobile SME – Offensive Security

We are looking for an experienced Principal Mobile SME – Offensive Security with strong expertise in mobile application security, penetration testing, and reverse engineering.

The ideal candidate should have hands-on experience identifying and investigating security vulnerabilities across Android and iOS platforms, evaluating mobile application security controls, and understanding emerging mobile attack techniques.

The candidate will play a key role in assessing mobile application security, identifying potential risks, and providing actionable recommendations to strengthen application security.

Key Responsibilities :

Perform mobile application penetration testing across Android and iOS platforms.

Conduct security assessments, vulnerability analysis, and mobile application reverse engineering.

Identify and investigate mobile security threats, attack vectors, and exploitation techniques.

Analyse application architecture, authentication mechanisms, data storage, API communications, and security controls.

Evaluate mobile application vulnerabilities and recommend appropriate remediation measures.

Perform static and dynamic application security testing.

Research emerging mobile attack techniques, security vulnerabilities, and exploitation methodologies.

Collaborate with development and security teams to improve mobile application security.

Prepare detailed technical reports documenting vulnerabilities, findings, risk levels, and remediation recommendations.

Assess security controls in banking, payment, and other financial applications.

Required Skills & Qualifications :

Minimum 5+ years of hands-on experience in penetration testing or security research.

Strong understanding of Android and iOS operating system security.

Proven experience in mobile application penetration testing.

Hands-on experience with mobile application reverse engineering.

Knowledge of static and dynamic security testing methodologies.

Strong programming or scripting skills.

Familiarity with one or more of the following:

Java

Kotlin

Swift

Objective-C

Understanding of mobile application vulnerabilities, exploitation techniques, and security assessment methodologies.

Ability to investigate complex security issues and document technical findings effectively.

Experience in banking, financial services, payment gateways, or fintech application security.

Experience assessing security controls in financial and transaction-based mobile applications.

Knowledge of mobile application security frameworks and industry best practices.

Relevant cybersecurity certifications such as OSCP, OSWE, or equivalent are an added advantage.

Strong analytical and problem-solving abilities.

Ability to independently conduct mobile security assessments.

Excellent technical documentation and communication skills.

Ability to clearly explain security vulnerabilities, business risks, and remediation approaches.

Strong research orientation and willingness to explore emerging mobile security threats.

Pay: Up to ₹2,500,000.00 per year

Work Location: In person