Job Description
We are seeking a highly skilled Mobile Application Security Specialist with hands-on experience in securing mobile platforms and applications. The ideal candidate will possess deep expertise in mobile threat modelling, vulnerability assessment, and penetration testing, with a strong understanding of Android and iOS security standards.
This role is critical to ensuring the security of our mobile platform and services. You will be responsible for designing, implementing, and continuously improving security frameworks, tools, and practices that protect mobile applications against evolving threats.
-----------------------------------
Key Responsibilities
* Conduct comprehensive security reviews and assessments of mobile applications, identifying vulnerabilities and recommending mitigation strategies.
* Design, develop, and maintain security testing tools, scripts, and frameworks to support penetration testing activities.
* Define and implement security policies, standards, and procedures for mobile platforms.
* Perform ongoing threat modelling and risk assessments to proactively address potential security gaps.
* Collaborate with development and DevSecOps teams to integrate security best practices throughout the mobile app lifecycle.
* Provide technical consultancy, guidance, and support to engineering teams on mobile application security.
* Research emerging security threats, tools, and technologies to enhance mobile platform resilience.
-----------------------------------
Essential Skills & Experience
* Proven experience in mobile platform security, including threat modelling and mitigation techniques.
* Hands-on expertise in conducting mobile application penetration testing and security posture reviews.
* Strong knowledge of Android and iOS security standards, frameworks, and best practices.
* Experience in developing and maintaining security testing tools, scripts, and automation frameworks.
-----------------------------------
Desirable Skills & Experience
* Familiarity with mobile application development and DevSecOps practices.
* Experience with mobile security testing tools and platforms.
* Strong understanding of authentication, authorization, encryption, and cryptographic principles.
* Proven ability to research and evaluate emerging technologies in the security landscape.
-----------------------------------
Mandatory Skill Matrix
Skill
Proficiency
Mobile platform security
Required
Threat modelling and mitigation techniques
Required
Mobile application security posture assessment (hands-on)
Required
Penetration testing tools, scripts, policies, and procedures
Required
Mobile app security standards (Android / iOS)
Required