Senior Android Penetration Tester

As a Senior Android Penetration Tester, your role involves leading advanced mobile application security testing and vulnerability assessments. You will be evaluating Android applications, SDKs, APIs, and supporting infrastructure against modern threat models and compliance standards such as OWASP MASVS, PCI DSS, and Google Play Store policies. Your deep technical expertise, hands-on testing experience, and ability to provide remediation guidance will be crucial for this position. Key Responsibilities: - Conduct comprehensive penetration tests of Android applications & SDKs. - Perform threat modeling and risk assessment to identify attack vectors and potential exploits. - Set up and maintain reproducible test environments including emulators, rooted devices, proxies, and instrumentation frameworks. - Perform static, dynamic, and runtime analysis of Android applications by reverse engineering APKs, analyzing AAR/JAR, DEX, smali code, and JNI/NDK libraries. - Identify and exploit vulnerabilities such as insecure data storage, improper authentication/authorization, broken cryptography, hardcoded secrets & keys, insecure inter-app communication, and API security weaknesses. - Evaluate compliance with OWASP MASVS/MSTG, PCI DSS, and Google Play Store security requirements. Required Skills & Qualifications: - 5+ years of professional experience in mobile penetration testing with a focus on Android for at least 3 years. - Strong knowledge of Android architecture, SDKs, and internals including Dalvik/ART, IPC, permissions, and intents. Preferred Qualifications: - Certifications: OSCP, OSWE, GMOB, GXPN, CEH (Practical), CREST CRT/CCSAS. - Prior experience in secure code review and threat modeling for mobile apps.,