Principal Mobile Application Penetration Tester

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

Ready to shape the future of mobile security? Join us as Principal Mobile Application Penetration Tester!

We’re looking for a Principal Mobile Application Penetration Tester to join a global cyber security organization and raise the bar on how we test and protect mobile apps. This is a hands-on, principal role where you’ll lead complex mobile security assessments from start to finish, influence standards, and guide stakeholders in navigating an ever-evolving threat landscape.

You’ll work at the core of mobile security—testing iOS and Android applications, innovating on methodologies, and driving excellence across teams worldwide. If you’re passionate about being a trusted security leader, this role is for you!

Sounds like your kind of challenge?

Li-Hybrid

Kraków: 6 days/month on-site

What you'll be doing

• Lead end-to-end mobile app penetration tests: scoping, planning, execution, and reporting
• Deliver high-quality testing outputs with actionable remediation guidance
• Serve as the escalation point for complex technical challenges and high-impact findings
• Set and evolve mobile testing methodologies and frameworks across the organization
• Collaborate with global penetration testing leads to ensure consistency across regions
• Drive improvements in tooling, automation, and best practices for mobile security
• Support vulnerability management lifecycle and incident response when needed
• Stay ahead of emerging mobile attack vectors, tools, and security trends

Note: Detailed project information will be shared during the recruitment process.

What you get in return

• Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
• Hybrid work setup – remote days available depending on the client’s arrangements
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Who we're looking for

• 3–5 years in penetration testing with a strong focus on mobile application security
• Hands-on experience testing iOS and Android apps , addressing platform-specific risks
• Expertise in mobile security plus at least one additional domain (web apps or infrastructure)
• Strong understanding of vulnerabilities, attack techniques, and security principles
• Knowledge of TCP/IP fundamentals, network security, and OWASP mobile standards (MASVS, MSTG)
• Experience with manual and automated testing tools
• Strong problem-solving, analytical skills, and ability to communicate complex topics clearly
• Familiarity with scripting or programming

Nice to have

• Experience with Corellium platform , SAST/DAST/IAST tools , or secure SDLC
• Code review experience in Java, Swift, Objective-C, or Kotlin
• Understanding of OAuth2, JWT, biometrics, and SSL pinning
• Familiarity with microservices, APIs, and cloud environments
• Experience in financial or other regulated industries

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Ready to take the next step? Submit your application! We look forward to reviewing your profile 😊

🌍 Global impact, cutting-edge security challenges, and a chance to lead in one of the fastest-growing domains—mobile security. If this sounds like the next big step in your career, we’d love to hear from you!

Know someone who might be a great fit? Feel free to share this opportunity using the referral link: Mindbox Referrals System