Mobile

Mobile Cybersecurity Jobs

2 jobs found

Today

Penetration Tester (Mobile, API & Application Security)

U.S. Bank National Association Irving, TX

Irving, TX

Today

$105k - $124k/yr Full time Api Security Api Testing Application Security

Apply Now

Job Description

A Penetration Tester specializing in mobile, API, and application security will perform rigorous testing and security assessments across mobile, web, API, and AI-enabled applications for U.S. Bank National Association. This onsite position is based in Irving, Texas, with a yearly salary range of USD 105,400 to 124,000. The role requires a strong foundation in security testing and collaboration with engineering teams to drive remediation.

Responsibilities

Conduct penetration tests of mobile platforms (Android and iOS), web applications, and APIs using a mix of manual techniques and tooling.
Identify security weaknesses and, when appropriate, demonstrate impact through controlled exploitation.
Produce clear findings with risk ratings and remediation guidance for both technical and non-technical stakeholders.
Apply established testing methodologies, standards, and playbooks while continuing to develop practical exploitation skills.
Research emerging threats, tools, and techniques, including AI and application security risks, and apply learnings during assessments where applicable.
Participate in security assessments of AI-enabled applications and services, including systems with machine learning models, APIs, or large language models (LLMs).
Contribute to team initiatives such as process improvements, internal documentation, tool usage, and knowledge sharing.
Collaborate with peers and stakeholders during engagements and remediation discussions.

Requirements

Bachelor's degree in Engineering or Science, or an equivalent combination of education and work experience.
Five or more years of experience in information security.
Two or more years of experience in IT infrastructure management.
Two or more years of experience in application architecture.
Two or more years of experience in risk management.
Two or more years of experience in data architecture.
Two or more years of experience in middleware technology.
Two or more years of experience in IT operations or project management.
Three or more years of hands-on experience testing Android and/or iOS applications.
Working knowledge of mobile platform security risks and common weaknesses.
Familiarity with OWASP MASVS and MASTG.
Practical understanding of the OWASP Top 10 and OWASP API Security Top 10.
Experience identifying authentication, authorization, input validation, and business logic vulnerabilities.
Proficiency with Burp Suite (Community or Pro), Postman, or Insomnia.
Ability to perform manual testing beyond automated scanner output.
Exposure to AWS and/or Azure environments.
Basic familiarity with cloud-hosted or containerized application architectures.
Working knowledge of HTTP/S, authentication and authorization (OAuth, JWT), and general networking concepts.
Exposure to tools such as Nmap, Metasploit, and Kali Linux.
Familiarity with AI and machine learning security concepts.
Aware of AI-related risks, including prompt injection, insecure model or API access, and data leakage.
Understanding of how AI security risks intersect with traditional application and API testing.
Interest in contributing to light automation or scripting to improve testing efficiency.
Ability to produce clear, well-structured written findings and remediation guidance.
Comfortable discussing security findings with engineers, application owners, and security partners.

Technologies

Burp Suite
Postman
Insomnia
AWS
Azure
Nmap
Metasploit
Kali Linux
Frida
JADX
ServiceNow
Python
Bash
PowerShell
OAuth
JWT
HTTP
HTTP/S

Benefits

Healthcare coverage includes medical, dental, and vision
Basic and optional term life insurance
Short-term and long-term disability insurance
Pregnancy disability and parental leave
401(k) with employer-funded retirement plan
Paid vacation ranging from two to five weeks based on salary grade and tenure
Up to 11 paid holidays per year
Adoption assistance
Sick and Safe Leave accruals at one hour for every 30 hours worked, up to 80 hours per calendar year unless restricted by applicable law

E-Verify

U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.

View full job page →

1d ago

Mobile Application Security Engineer

Booz Allen Hamilton Fort Meade, MD

Fort Meade, MD

1d ago

$69k - $158k/yr Full time Application Security Cybersecurity Tools Information Security

Apply Now

Job Description

What we offer

Based in Fort Meade, MD, this onsite role at Booz Allen Hamilton provides a collaborative environment focused on government mobile security. You will contribute across the mobile security lifecycle on agile teams, leveraging automation and machine learning to improve outcomes, and help design and deliver secure mobile solutions. The position supports professional growth through a comprehensive benefits program.

Benefits

Health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits

Responsibilities

Involved in the full life cycle of mobile application security and solution design
Perform reverse engineering and vulnerability analysis of various software problems
Inform operational parameters for complex systems
Leverage automation and machine learning to influence the delivery of your work
Determine what the art of the possible is, and what can be done, and then you’ll bring it to life for your clients

Requirements

2+ years of experience with iOS and Android mobile device operating systems
Knowledge of static and dynamic mobile app security analysis concepts
Knowledge of protocol and network analysis using mitmproxy and Wireshark
Knowledge of common mobile application vulnerabilities and mobile threats
Secret clearance
Bachelor's degree

Nice to have

Experience developing iOS and Android mobile applications
Experience with reverse engineering tools and frameworks, such as Frida, APKtool, Jadx, MobSF, NowSecure, or Quokka
Knowledge of common mobile application authentication and encryption methods, including OAuth and PKI
Knowledge of the OWASP MASVS and MASTG, and the MSTG
Knowledge of OWASP Mobile Top 10 and MSTG
Excellent verbal and written communication skills
Security related certifications such as Security+, CEH, SANS Mobile Device Security, or Ethical Hacking

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.

Technologies

iOS
Android
mitmproxy
Wireshark
Frida
APKtool
Jadx
MobSF
NowSecure
Quokka
OAuth
PKI

Compensation

Salary range: USD 69,400.00 to 158,000.00 (annualized). The role includes a comprehensive benefits package as described above.

View full job page →

Mobile Cybersecurity Jobs

Penetration Tester (Mobile, API & Application Security)

Mobile Application Security Engineer

Get Mobile Cybersecurity Jobs alerts