Job Description

Job Title: Security Test Engineer

Department: CDF

About Business line/Function: ITG Security Testing

Position Purpose: The purpose of the position is to help with the security testing activities mentioned in the direct responsibilities.

Responsibilities

Direct Responsibilities
- To perform Penetration testing (Gray Box and/or Black Box) for Web applications, Mobile, API, and thick client applications.
- Hands-on mobile penetration tester with strong knowledge and experience in Android and iOS application security testing (both static and dynamic), responsible for discovering, validating and reporting security issues in mobile applications.
- Perform Static analysis (SAST) and Dynamic analysis (DAST) on Android APKs and iOS IPA to identify insecure storage, hardcoded secrets, insecure configurations, runtime hooking, parameter tampering etc
- Conduct reverse engineering and protection bypass on mobile applications including decompiling /inspecting binaries, analyzing native libraries (.so/.dylib) and bypassing client-side protections (root / jailbreak detection,



SSL pinning, obfuscation, tamper checks etc.) using tools like Frida, objection magisk, cydia/selio/zebra and Xposed.
- Robust research knowledge and should be updated with evolving mobile threats and industry standard (OWASP MASVS/MASTG)
- To understand the application's security requirements and identify & document the scope of the test.
- Ensure execution of the documented security scenarios for the application under test.
- Document and report all findings.
- Collaborate with the developers to help them understand the vulnerabilities reported in application.
- Escalate issues to the local management and onshore stakeholders in case it affects the testing progress.
- Ensure processes for the project is followed for the assessments.

Note

Mandatory requirement – Mobile, Web & API Penetration Testing
- Optional, experience in Source Code Assessment (SCA)/SAST.

Contributing Responsibil

📌 Security Test Engineer (India)
🏢 Bnp Paribas Bank
📍 India