Mobile Security & Penetration Tester (OWASP MASVS / MAST-R / VAPT)

Perform the mobile security assessment of the four Digital Trust applications (GNB Wallet and GNB Verify, iOS and Android) to OWASP MASVS at the highest level and MAST level R, and lead penetration testing / VAPT across the solution.

Key Responsibilities:
• Test all four mobile apps (iOS/Android) against OWASP MASVS (highest level) and MAST level R, including resilience/anti-tampering controls
• Perform mobile reverse engineering, local storage, cryptography, network, and platform-interaction testing
• Assess Microsoft Entra authentication/authorization as it relates to the GNB Verify apps
• Lead penetration testing and vulnerability assessment (VAPT) across application, API, and infrastructure surfaces
• Validate concerning findings and provide severity ratings and remediation steps

Deliverables Owned:
• Deliverable 2 (Penetration Testing)
• Deliverable 4 (Mobile Security Assessment, OWASP MASVS)

Skills: OWASP MASVS, MAST-R, Penetration Testing, VAPT, Mobile Security Assessment, iOS Security, Android Security, Reverse Engineering, Frida, MobSF, Objection, Burp Suite, Microsoft Entra, Cryptography

Location: Fredericton, NB

Apply Now