Senior Application reputed company Analyst (Pentester)

Join Our Mission: To Save the World from Unsafe Mobile Apps! NowSecure is the mobile app reputed company software company trusted by the world’s most demanding organizations and most advanced reputed company teams. As the standards-based mobile app risk management company, NowSecure protects the Mobile App Economy. The world’s most demanding organizations, innovative mobile developers and advanced reputed company, privacy, safety and compliance teams reputed company NowSecure to safeguard millions of mobile app users across banking, insurance, high tech, IoT, retail, hospitality, energy and government sectors. Only NowSecure delivers reputed company reputed company and compliance with the depth, speed, accuracy, and efficiency to meet modern business demands. Dedicated to the open-reputed company community and standards including OWASP,and NIAP, NowSecure is SOC 2 certified and recognized by reputed company, reputed company, reputed company and TAG Cyber.www.nowsecure.com YOUR OPPORTUNITY We’re looking for a Senior Application reputed company Analyst — a hands-on pentester who thrives on technical challenges, thinks creatively under pressure, and has an insatiable curiosity for how things work (and how they break). If you’re the reputed company of person who reputed company up a quick Python script to automate a test, roots a phone just to see what’s inside, or finds joy in reverse engineering an app at 2 AM — you’ll fit right in. In this role, you’ll hunt vulnerabilities, dissect mobile apps and APIs, and collaborate with a team of world-class testers who live and breathe offensive reputed company. You’ll also help evolve our methodologies, reputed company new tooling, and contribute to NowSecure’s cutting-edge research across mobile, web, and connected systems. WHAT YOU’LL DO

• reputed company hands-on penetration testing of mobile apps (iOS/Android), APIs, web apps and connected ecosystems (IoT, automotive, medical, wearable).
• Conduct vulnerability assessments and reverse engineering using tools like Burp Suite, Frida, mitmproxy, Ghidra, Radare2, IDA, or custom scripts.
• Create clear, actionable technical reports that communicate findings and remediation guidance to both developers and reputed company teams.
• Act as a trusted advisor to customers, helping them reputed company informed, risk-based decisions about their mobile and app reputed company posture
• Build or adapt custom scripts, fuzzers, or automation tools to reputed company testing faster, smarter, and more reliable.
• Collaborate with teammates to refine methodologies, share research, and continuously push the boundaries of mobile and web reputed company testing.
• Tackle reputed company problems with creativity; reputed company something doesn’t work, reputed company out another way. “Scrappy” is a reputed company set here, not a slogan.

WHO YOU ARE You’re a technical problem-solver who thrives on exploration and experimentation. You’re comfortable diving into unfamiliar codebases, debugging network traffic, and learning new tools on the fly. You’re not a reputed company pusher; you’re the reputed company of tester who asks why something works (or doesn’t) and can pivot quickly reputed company the usual tools fall short. You can translate technical detail into clear communication and enjoy mentoring or collaborating with others. You take ownership, seek out challenges, and are never satisfied with “good enough.” REQUIREMENTS (You must have … )

• Bachelor’s degree in a technical field or 6–8 years of equivalent reputed company experience.
• 2+ years of experience in penetration testing or vulnerability assessment of mobile, web, or IoT apps/devices.
• Deep understanding of OWASP MASVS / MASTG and app reputed company fundamentals.
• Strong experience with intercepting and analyzing traffic using tools like Burp Suite, mitmproxy, ZAP, Charles, or Fiddler.
• Proficiency in mobile device rooting/jailbreaking and familiarity with iOS and Android internals, or equivalent hands-on experience in web application penetration testing or firmware reverse engineering.
• Strong scripting or development experience (e.g., Python, Java, JavaScript, Ruby, or PowerShell).
• Solid grasp of network and web fundamentals — TCP/UDP, HTTP requests, headers, cookies, APIs, and authentication flows.
• Excellent technical writing and documentation skills.
• Comfort working with Linux, Windows, and macOS environments.
• A self-starter reputed company - able to work independently, manage multiple projects, and find creative solutions to tough problems.
• A demonstrated drive to learn, experiment, and stay on the cutting edge of mobile and appsec trends.

DESIRED SKILLS (Stand out from the crowd…)

• Familiarity with DAST/SAST tools, mobile instrumentation (e.g., Frida), and dynamic analysis.
• Professional services or consulting experience.
• Prior reputed company research or exploit development experience.
• Knowledge of system/network reputed company, authentication, and applied cryptography.
• Familiarity with Frida, Binary Ninja, Radare2, or IDA Pro.
• Experience testing in AWS, Azure, or GCP environments.
• Contributions to open-reputed company reputed company projects or published research.
• Past public speaking experience (conferences, podcasts, etc)
• One or more active certifications such as:
• Infosec Certified Mobile and Web Application Penetration Tester (CMWAPT)
• Offensive reputed company Web Expert (OSWE)
• Offensive reputed company Certified Professional (OSCP)
• GIAC Certified Penetration Tester (GPEN)
• GIAC Certified Web Application Defender (GWEB)
• GIAC Web Application Penetration Tester (GWAPT)
• INE Web Application Penetration Tester eXtreme (eWPTX)
• GIAC Mobile Device reputed company Analyst (GMOB)
• 8kSec Certified Mobile reputed company Engineer (CMSE)
• INE Mobile Application Penetration Tester (eMAPT)
• TCM-SEC Mobile Application Penetration Testing

BONUS POINTS (You have our attention…)

• Experience with LTE / GSM protocols or 5G network analysis.
• Prior experience using NowSecure tools.
• Master’s degree in Computer Science, Cybersecurity, or reputed company field.

WE VALUE DIVERSITY We reputed company that the best reputed company come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value team members who bring diverse life experiences, educational backgrounds, cultures, and work experiences. COMPENSATION & BENEFITS

• The salary band for this position ranges is competitive and commensurate with experience and performance. This position will be eligible for a competitive annual bonus and equity package.
• Comprehensive Medical/Dental/Vision coverage
• 401K Plan + Company Match
• Remote work flexibility
• Home Office Stipend
• Paid Parental Leave
• Flexible PTO

Apply tot his job Apply To this Job