As a mobile security pentester you are performing security tests on mobile applications and the infrastructure and of the bank. Your knowledge and experience will contribute to improving the overall security posture of the bank by helping development teams to bring security by design in their day-to-day work and by raising security awareness. 

With the following results:

You are responsible for executing pentests on the bank her assets. Testing iOS/Android mobile apps will be your main focus area of work. You identify security vulnerabilities, report them and advise development teams about ways to fix them. As a pentester you stay well informed on the latest developments in the field of technology and threats and you actively share this knowledge with your colleagues. You help solving security-related questions, take initiative and escalate in time if needed. You signal improvements related to the way of working inside the team and you contribute to improving the maturity and coverage of our service offering.  

Relevant knowledge skills & competences:

We are looking for a mobile security pentester who also has development experience.  

Required skills: 

Development skills: 

• You have at least 2 years of relevant working experience in iOS development or Android development (having both is a plus) 
• You have experience with mobile programming languages (i.e. Swift/Objective-C or Kotlin/Java, both is a plus). 

Pentesting skills: 

• You have recent knowledge about most used iOS/Android frameworks (networking, dependency injection, databases) and design patterns (MVVM, MVC, etc.). 
• You have experience with relevant security testing tools (i.e. Burpsuite, Frida, Objection, IDA Pro etc.) and development tools (i.e. git, Xcode, Android Studio). 

Generic skills: 

• You have the ability to translate technical risks into business risks and vice versa. 
• You take ownership of your own and team’s delivery and have a proactive attitude. 
• You are fluent (verbal and in writing) in English. 
• You are pragmatic and analytical and have good communication and social skills. 
• Page Break 

Nice-to-have: 

• You are fluent (verbal and in writing) in Dutch. 
• You possess a number of relevant certifications like OSCP, OSCE, etc. 
• You have software reverse engineering skills on multiple architectures (e.g. X86, ARM). 
• You enjoy playing CTFs and publish your write-ups.