This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
A rapidly growing leader in proactive cybersecurity services is expanding its consulting team and seeking a Security Consultant with a strong background in mobile application penetration testing. This role is ideal for a hands-on penetration tester who enjoys uncovering complex vulnerabilities and delivering meaningful security improvements for enterprise clients. You will work alongside experienced security professionals, leveraging advanced tooling, automation, and research-driven methodologies to perform deep technical testing across mobile applications and APIs. The focus of this role is on producing high-quality, actionable findings that help organizations strengthen their security posture.
Job Responsibility:
Perform penetration testing engagements on mobile applications (iOS and Android) and associated APIs
Identify weaknesses related to data storage, network communications, authentication, and cryptography
Analyze mobile application behaviour, sandboxing, and OS-level security controls
Produce clear, well-structured penetration testing reports aligned with client-specific standards and workflows
Collaborate with internal teams and clients to explain findings and recommend remediation strategies
Research and develop new tools, techniques, and testing methodologies to improve assessment quality
Support consulting operations through documentation, reporting, and engagement-related administrative tasks
Requirements:
2–3+ years of experience conducting application or mobile penetration testing
Hands-on experience with offensive security tools such as Kali Linux, Burp Suite, Metasploit, Nessus
Mobile-focused tools including Frida, Drozer, Objection, and Ghidra
Solid understanding of mobile data security, encryption, and secure communications
Strong working knowledge of Android and iOS operating systems
Familiarity with common offensive and defensive security concepts and network protocols
Deep understanding of the OWASP Top 10 and relevant security frameworks
Working knowledge of Windows, Linux, and macOS internals
Ability to work independently while collaborating effectively within a team
Strong written and verbal communication skills
Willingness to travel up to 5–10%
Ability to support an 8-hour workday, with occasional evenings or weekends as required by project timelines
Nice to have:
Mentoring or coaching junior team members
Sharing security knowledge through blogs, webinars, or conference presentations
Experience with scripting or programming languages such as Python, Ruby, Perl, Java, C/C++, or C#