Position Purpose: The purpose of the position is to help with the security testing activities mentioned in the direct responsibilities.

Role & responsibilities
To perform Penetration testing (Gray Box and/or Black Box) for Web applications, Mobile, API, and thick client applications.
Hands-on mobile penetration tester with robust knowledge and experience in Android and iOS application security testing (both static and energetic), responsible for discovering, validating and reporting security issues in mobile applications.
Perform Static analysis (SAST) and Energetic analysis (DAST) on Android APKs and iOS IPA to identify insecure storage, hardcoded secrets, insecure configurations, runtime hooking, parameter tampering etc
Conduct reverse engineering and protection bypass on mobile applications including decompiling /inspecting binaries, analyzing native libraries (.so/.dylib)



and by passing client-side protections (root / jailbreak detection, SSL pinning, obfuscation, tamper checks etc.) using tools like Frida, objection magisk, cydia/selio/zebra and Xposed.
Strong research knowledge and should be updated with evolving mobile threats and industry standard (OWASP MASVS/MASTG)
Clear understanding of OWASP Top 10 - application security risks
Tools/OS: Burp Suite, OWASP ZAP, Kali Linux, mobsf, jadx, dex2jar, adb, xcode, Frida, objection, apktool, putil, otool.
Manual Security Testing & Analysis, Security Test Designing

Preferred candidate profile
Preferrence give to Immediate joiners
Maximum 15 Days notice period

📌 Security Testing Engineer Chennai
🏢 Bct Consulting
📍 Chennai