Job Description :

Key Responsibilities

▪ Perform end-to-end security testing of Android and iOS applications using static, energetic, behavioral, and

manual validation techniques aligned to mobile security best practices.

▪ Assess mobile applications for insecure data storage, weak authentication and authorization, insecure

transport, cryptographic weaknesses, hardcoded secrets, WebView issues, deep link abuse, root / jailbreak

weaknesses, and anti-tamper gaps.

▪ Validate source-based and binary-based security posture for APK / AAB / IPA deliverables, including

package structure, embedded components, risky permissions, and exposure of sensitive data or

functionality.

▪ Operate or coordinate SAST, SCA, DAST, and API Security testing for mobile applications and supporting

services, ensuring results are triaged, normalized, and actioned.

▪ Perform API security assessment of mobile backend services, including object-level authorization, broken

authentication, excessive data exposure, rate limiting gaps, SSRF scenarios, business-flow abuse, and





security misconfiguration.

▪ Support or evaluate IAST and runtime validation approaches where instrumentation can improve visibility

into reachable vulnerabilities and runtime behavior.

▪ Validate mobile runtime protection / RASP-aligned controls such as SSL pinning, jailbreak / root detection,

anti-debugging, integrity verification, and anti-tamper mechanisms where applicable.

▪ Conduct threat modeling for features, architectures, and user journeys using structured methods such as

STRIDE; convert threats into security requirements, abuse cases, and test objectives.

▪ Integrate or govern security checks within CI/CD pipelines for mobile builds, including scan orchestration,

secure secrets handling, branch / environment controls, artifact signing, and policy-based promotion

gates.

▪ Generate, review, or govern SBOM outputs and assess software supply chain risk for dependencies, SDKs,

packages, plugins, and th

📌 Mobile Penetration Testing (India)
🏢 Trigent Software
📍 India