Perform manual and automated security testing of Android and iOS mobile applications supporting digital payment ecosystems. Conduct dynamic analysis, runtime instrumentation, reverse engineering, API testing, and payment-flow security assessments. Identify vulnerabilities, develop proof-of-concept exploits and custom scripts, report findings, support remediation and retesting, and research emerging attack vectors. Collaborate with development and product teams while contributing to security tools, methodologies, and knowledge sharing.
Key Responsibilities
- Perform security testing of Android and iOS mobile applications used in digital payment ecosystems
- Conduct manual and automated mobile security testing aligned with:
- OWASP Mobile Top 10
- OWASP MASVS & MSTG
- Identify vulnerabilities related to:
- Insecure data storage
- Weak cryptography
- Insecure communication
- Authentication & authorization flaws
- Business logic issues in payment flows
- Perform runtime instrumentation and dynamic analysis using:
- Frida, Objection, Xposed
- Reverse engineer mobile applications using:
- APKTool, JADX (Android)
- Basic iOS reverse engineering tools (class-dump, Hopper, Ghidra)
- Intercept and analyze mobile traffic using:
- Burp Suite (Mobile Assistant preferred)
- mitmproxy / Charles Proxy
- Test mobile backend APIs supporting payment workflows using:
- Burp Suite, Postman
- Validate security of payment features, including:
- UPI, wallets, cards, tokenization
- OTP, MFA, session management
- Prepare high-quality vulnerability reports with:
- Risk assessment
- Proof of Concept (PoC)
- Clear remediation guidance
- Support retesting and vulnerability closure
- Work closely with development and product teams to explain findings and fixes
R&D Mindset & Innovation (Mandatory)
- Strong research-driven mindset to explore vulnerabilities beyond standard checklists
- Ability to research and validate new attack vectors in mobile and FinTech environments
- Regularly analyze:
- New Android/iOS versions and security changes
- Advanced bypass techniques (SSL pinning, root/jailbreak detection)
- Develop custom test cases for complex payment and business logic scenarios
- Contribute to:
- Internal tools, scripts, and testing methodologies
- Knowledge sharing and security best practices
- Ability to independently validate false positives and negatives
Scripting & Automation Skills (Mandatory)
- Hands-on scripting experience in one or more of the following:
- Python – automation, PoC development, API testing
- JavaScript – Frida hooks and runtime manipulation
- Bash – automation and tooling
- Ability to:
- Write and modify custom Frida scripts
- Automate repetitive testing and analysis tasks
- Customize open-source tools for specific app behaviors
- Strong understanding of secure coding flaws through runtime and code-level analysis
Mandatory Skills & Experience
- 3–4 years of experience in mobile application security testing
- Strong understanding of Android and iOS security architectures
- Hands-on experience with:
- MobSF, AndroBugs, QARK
- Frida, Objection
- Burp Suite
- Experience testing BFSI / FinTech / Digital Payment applications
- Strong knowledge of:
- OWASP Mobile Top 10
- OWASP API Top 10 (supporting APIs)
Good to Have
- Exposure to PCI-DSS, RBI, or CERT-In security requirements
- Experience with CI/CD integration for mobile security testing
- Basic understanding of cloud and backend security supporting mobile apps
- iOS security testing experience is a strong plus
Talakunchi Networks Private Limited Dombivli, Mahārāshtra, IND Office
Dombivli, India
Talakunchi Networks Private Limited Mumbai, Maharashtra, IND Office
Mumbai, India
Similar Jobs
Financial Services
Lead design, build, deployment, and support of IBM Planning Analytics/TM1 solutions on AWS. Architect TM1 models, develop PAW/PAfE artifacts, manage TI processes and integrations, establish governance and SDLC controls, lead a TM1 team, drive AI-assisted engineering adoption, and partner with business stakeholders to optimize planning processes and ensure compliance and resiliency.
Top Skills:
ArchitectAWSCi/CdCognos AnalyticsContainerizationDatabricksIbm Cloud For DataIbm Planning AnalyticsPerspectivesPlanning Analytics For Excel (Pafe)Planning Analytics On CloudPlanning Analytics Workspace (Paw)PythonTm1Turbointegrator (Ti)
Financial Services
Prepare and submit India regulatory reports, perform reconciliations and variance analysis, produce management and KPI reporting, monitor nostro breaks, support audits, maintain procedures, and partner with technology and control teams to automate processes and resolve issues.
Top Skills:
ExcelMS OfficeMicrosoft PowerpointMicrosoft Word
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Oversee private equity fund accounting, NAV calculations, financial reporting, transaction accounting, audits, investor reporting, and compliance with accounting standards. Lead fund accountants, manage stakeholder relationships, review controls, and drive process improvements and system implementations. The role requires strong knowledge of private equity accounting, carried interest, capital activity, complex investment structures, and fund accounting systems.
Top Skills:
GenevaInvestranExcel
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
