Mobile Security Evaluator

We are Applus+ Laboratories, the division of the Applus+ Group that provides testing, certification, and product development engineering services.

In the CYBERSECURITY laboratory, we are accredited to perform a wide range of security evaluations for payment schemes, identification, and IT security.

We are looking for a Junior Mobile Security Engineer to join our team and participate in technical security assessments focused on Android and iOS applications and devices. You will contribute to security evaluations following certification requirements, perform mobile application testing, and support internal R&D initiatives focused on mobile attack techniques, tooling, and automation.

Essential job responsibilities

• Analyze customer's technological solutions.
• Perform ad-hoc evaluations, subject to customer constraints and needs.
• Conduct security evaluations in compliance with certification standards, primarily for EMVCo SBMP and PCI MPoC certifications.
• Conduct security evaluations for mobile devices, for example Android and IOS platforms.
• Perform advanced technical security analyses, including:
• Secure source code reviews for different components of payment systems.
• High Assurance Vulnerability Analysis (VA).
• Perform mobile network attacks such as Man in the Middle (MitM).
• Advanced penetration testing using reverse engineering, hooking, debugging, patching techniques.
• Write technical reports and communicate effectively with customers, testing laboratories, and other stakeholders.

To be considered, candidates must possess

• Education: Technical background such as Computer Science, Telecommunication, Electronics, Mathematics or equivalent degree.
• Coding experience with Python / C / C++, Kotlin, Swift, Java…
• 0-2 years of experience in the same position
• Languages: Spanish and English (at least B2)
• Strong analytical and communication skills

Nice to have

• Experience with Android or iOS applications
• Hands-on experience with software attack analysis and defense mechanisms on iOS/Android platforms
• Experience with hacking tools such as Frida, IDA, JEB, JDB, Magisk or equivalent
• Knowledge of penetration testing, reverse engineering, at least at theoretical level
• Knowledge of OWASP, NIST, PCI, ISO, COBIT.
• Knowledge of application obfuscation or hardening techniques.
• Experience with Cross-site scripting, SQL injections, Exploiting, etc.
• Certifications such as CompTIA Security+, eJPT and CEH.

Our current stack and tools:

• Programming Language, Python, C/ C++
• Hacking tools such as Frida, IDA, JEB, JDB, Magisk
• Git
• Operative Systems, UNIX Based OS

Benefits

• Permanent contract.
• Full-time position.
• 23 vacation days and 3 personal days.
• Flexible compensation plan (health insurance, transportation, childcare, meal vouchers).
• Employee parking.
• Green spaces and wellness activities, including yoga classes, to promote well-being.
• Subsidized menu with reduced prices.

Are you passionate about cybersecurity? Do you want to be part of a team of top experts? This is the company for you!

Applus+ Laboratories is an equal opportunity employer. We are committed to evaluating all applications equally based on skills, achievements, and experience, regardless of race, nationality, gender, age, disability, sexual orientation, gender identity, or any other classification protected by law.