Lead mobile application security assessments across Android and iOS, conducting automated and manual penetration testing, reverse engineering, runtime analysis, and vulnerability identification. Prepare technical reports with risk ratings, proof-of-concept evidence, and remediation guidance. Engage client AppDev, QA, and InfoSec stakeholders, review junior analysts’ deliverables, support presales estimation, and mentor security team members.
Job Title: Mobile Application Security Lead (AppSec)
Location: Mumbai
Experience Required: 4–5 Years
Job Type: Full-time, On-site
Job Overview:Talakunchi Networks Pvt Ltd is seeking a skilled and motivated Mobile Application Security Lead to oversee and deliver comprehensive security assessments across Android and iOS platforms. The ideal candidate will have a strong background in mobile app penetration testing and will serve as both a technical lead and client-facing expert, ensuring high-quality delivery across multiple engagements.
Key Responsibilities:- Lead and execute mobile app security testing for Android and iOS platforms.
- Perform both automated and manual penetration testing including:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Runtime instrumentation and analysis
- Reverse engineer APKs/IPAs to identify vulnerabilities such as hardcoded secrets and logic flaws.
- Identify and report security issues based on OWASP Mobile Top 10, insecure storage, transport layer issues, and platform-specific flaws.
- Use advanced tools: Frida, Objection, MobSF, Burp Suite, Jadx, APKTool, Xposed, Postman, etc.
- Prepare detailed technical reports with:
- Risk ratings (CVSSv4/custom)
- Proof of Concept (PoC)
- Practical remediation recommendations
- Interact with client-side stakeholders such as AppDev, QA, and InfoSec teams.
- Review and validate deliverables prepared by junior team members.
- Assist in pre-sales efforts: scope definition, effort estimation, and technical discussions.
- Mentor and train junior security analysts in mobile AppSec practices.
- Stay up-to-date with the latest mobile vulnerabilities, trends, and tools.
- Strong understanding of mobile security architecture, Android/iOS internals, and sandboxing
- In-depth knowledge of OWASP Mobile Top 10 and MASVS
- Proficient in tools such as:
- Frida, Objection, Burp Suite, MobSF, Charles Proxy, APKTool, Jadx
- Postman/Insomnia for API testing
- Experience with Jailbreaking/Rooting, SSL pinning bypass, and secure coding practices
- Familiarity with software development life cycle (SDLC) and CI/CD environments
- Experience in ticketing systems like Jira, ServiceNow, etc.
- CEH
- eMAPT
- eWPTXv2
- Knowledge of mobile CI/CD security pipeline
- Familiarity with banking/fintech security standards (RBI, PCI DSS, etc.)
- Experience in effort estimation and VAPT project planning
Similar Jobs
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Leads complex, cross-functional scientific learning projects for Medical Affairs. Develops curricula, e-learning, and blended learning programs; partners with medical, scientific, agency, and learning systems teams; manages multiple projects, timelines, budgets, and priorities; evaluates emerging e-learning technologies; and updates existing learning resources across therapeutic areas.
Top Skills:
Articulate StorylineDigital Learning TechnologyE-Learning Authoring ToolsLearning Management Systems
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Leads multiple software engineering teams through new product development from concept to implementation. Provides technical and strategic leadership across architecture, Java and Spring-based applications, cloud-native systems, microservices, CI/CD, quality initiatives, automation, and real-time platforms. Manages stakeholders, project metrics, cross-location coordination, business execution, team development, and strategic technology direction while ensuring consistent delivery and security practices.
Top Skills:
AICi/CdDigital Native ArchitectureJavaMicroservicesPivotal Cloud FoundryReal-Time Online SystemsScaled Agile FrameworkSpring BootSpring Framework
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Designs, develops, tests, deploys, and maintains secure software solutions across the full SDLC. Leads technical solution planning, production support, incident remediation, technology evaluations, and proof-of-concept initiatives. Creates technical documentation, ensures testing and quality compliance, coordinates offshore development, supports vendor collaboration, and mentors team members through training and knowledge transfer.
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
