Zimperium
Mobile Application Penetration Tester (iOS & Android) - Bangalore, India
Be an Early Applicant
Conduct thorough penetration testing of iOS and Android apps, identifying vulnerabilities, developing exploits, and collaborating with teams to enhance mobile security.
Zimperium® is an industry leader in enterprise mobile security, being the first and only company to provide a complete mobile threat defense system that offers real-time, on device world-class protection against both known and unknown next generation of advanced mobile cyberattacks and malware.
Our MTD and award-winning machine learning-based engine protects against device, network, phishing and application attacks for IOS, Android and Windows devices, using a non-intrusive approach to always protect privacy of users.
As part of our fast-growing pace, we are currently looking for an experienced Mobile Application Penetration Tester with deep expertise in security assessments of iOS and Android applications. The role requires advanced skills in runtime analysis, exploit development, and Red Team methodologies. You will be responsible for simulating real-world adversarial attacks, uncovering critical vulnerabilities, and working closely with stakeholders to strengthen the security posture of mobile ecosystems.
Key Responsibilities:
- Conduct end-to-end penetration testing of iOS and Android mobile applications, including static, dynamic, and runtime analysis.
- Assess mobile API integrations, authentication mechanisms, encryption protocols, and data storage security.
- Identify and exploit vulnerabilities such as insecure data storage, weak cryptography, insecure communication, jailbreak/root bypasses, insecure code practices, and business logic flaws.
- Use runtime instrumentation frameworks (Frida, Objection, Xposed) for dynamic testing and bypassing protections.
- Perform certificate pinning bypass, hooking, and traffic interception using advanced proxying techniques.
- Evaluate and attempt evasion of mobile app protections such as root/jailbreak detection, code obfuscation, anti-debugging, and tamper protection.
- Develop custom scripts/exploits (Python, Java, Swift, Kotlin, or C++) for advanced testing scenarios.
- Produce comprehensive penetration test reports, including risk ratings, proof-of-concept exploits, and actionable remediation steps.
- Work closely with development and research security teams to embed secure SDLC practices.
Contribute to Red Team exercises by simulating adversarial attacks against mobile endpoints.
Required Skills & Experience:
- 5+ years of experience in penetration testing, with at least 3 years focused on iOS and Android mobile applications.
Strong knowledge of OWASP Mobile Top 10, and NIST mobile security guidelines.
- Expertise in:
Static & Reverse Engineering: Apktool, JADX, Ghidra, Hopper, IDA Pro, Radare2, JD-GUI.
Dynamic & Runtime Testing: Frida, Objection, Cycript, LLDB, Xposed.
Automation/Frameworks: MobSF, Drozer, Appium (for automation-assisted testing).
Proxying & Interception: Burp Suite Pro, OWASP ZAP, MITM tools
- Solid understanding of mobile OS internals (Android security model, iOS security architecture, Keychain, Secure Enclave, sandboxing).
- Hands-on experience with jailbroken iOS and rooted Android devices for advanced exploitation.
Familiarity with cryptography, secure communications (TLS, cert pinning), and secure data storage techniques.
- Ability to think like an attacker and perform creative exploitation beyond automated tool findings.
Preferred Certifications:
OSCP / OSEP / OSED (Offensive Security)
OSWE / OSMR (Offensive Security Web & Mobile certs)
EWPTX / EWAPT (eLearnSecurity)
CRTP / CRTE (Red Team certs)
CEH / CAP / API Security Testing (good to have, but not mandatory if strong hands-on skills)
Zimperium, Inc. is a global leader in mobile device and app security, offering real-time, on-device protection against both known and unknown threats on Android, iOS and Chromebook endpoints. The company was founded under the premise that the then current state of mobile security was insufficient to solve the growing mobile security problem. At the time, most mobile security was a port from traditional endpoint security technologies.Zimperium recognized mobile devices had unique characteristics needing a completely new approach. The team set to work to reimagine how to protect mobile devices and developed the award winning, patented z9 machine learning-based engine.
Zimperium is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
Top Skills
Android
Apktool
Appium
Burp Suite Pro
C++
Cycript
Drozer
Frida
Ghidra
Hopper
Ida Pro
iOS
Jadx
Java
Jd-Gui
Kotlin
Lldb
Mobsf
Objection
Owasp Zap
Python
Radare2
Swift
Xposed
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
As a Staff Systems Engineer, develop and maintain Kubernetes platforms using Python, Go, Ansible, and Terraform, while managing clusters and improving monitoring solutions.
Top Skills:
AnsibleChefGoGrafanaKubernetesLinuxPrometheusPuppetPythonTerraform
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Drive the product strategy for Knowledge Graph, managing the end-to-end lifecycle and collaborating with various teams to enhance adoption and build customer-centric solutions.
Top Skills:
AIGenerative AiKnowledge GraphMlNatural Language Processing
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
The Senior Systems Engineer will design and develop software, integrate AI tools, enhance API services, and maintain high system reliability while collaborating in Agile teams.
Top Skills:
AWSAzureBlue-Green DeploymentCanary DeploymentDockerGCPGithub ActionsGitlabGoGrafanaJenkinsJwtKafkaKubernetesMySQLOauth2OidcOpentelemetryPostgresPrometheusPub/SubPythonRedisSqsTerraform
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
