Full job description

Responsibilities:

Perform dynamic and static analysis on mobile applications (Android/iOS) to uncover potential vulnerabilities.
Simulate attack vectors like MITM, code injection, and tampering to assess app resilience.
Identify and report on security flaws such as SSL pinning, obfuscation, data storage leaks, etc.
Analyze API calls, app logic, and encryption methods.
Work closely with developers to understand application design and ensure comprehensive test coverage.
Integrate automated tests into the CI/CD pipeline to support efficient software delivery.
Stay updated with the latest trends in test and share insights with the team.

Requirements:

Diploma/Advanced/Higher/Graduate Diploma in Computer Science, Engineering, or a related field.
Required language(s): Mandarin, English
At least 2 Years of working experience in the related field.
Proficient I; Android: Kotlin/Java, Android Studio, iOs: Swift, Xcode
Solid understanding of software testing principles, methodologies, and tools.
Excellent problem-solving and communication skills, with attention to detail.
Ability to thrive in a fast-paced, agile development environment.
It will be a plus if you have the following knowledge:
Mobile Application/Website Security Testing
- Mobile-Specific Vulnerability Testing
- Network Security Testing
IT Infrastructure
- Networking Security
- Data Center
Experience with mobile security
- SSL pinning, encryption, etc.
- Experience with debugging tools and performance profiling
- Understanding of reverse engineering concepts or tools (Frida,Apktool, Objection)
Good understanding of networking (HTTPs, MITMProxy, Burp Suite)

Benefits:

Job Type: Full-time

Pay: RM5000-RM15000 per month

Application Security Engineer