Mobile Security Tester

Quick Facts

• Role: Mobile Security Tester

• Focus: Testing and challenging Mobile In-App Protection (RASP) before customer release

• Platforms: Android and iOS

Description

You will test Mobile In-App Protection (RASP) and mobile application protection features against real-world attack techniques before they reach customers. You’ll validate detection and response for scenarios such as rooting, jailbreaking, debugging, Frida instrumentation, hooking, app repackaging, runtime tampering, screen sharing, overlays, and suspicious malware behavior. You’ll also document reproducible findings and collaborate with Mobile Reverse Engineers and SDK Developers to improve coverage and release readiness.

Responsibilities

• Test RASP and mobile application protection features in Mobile In-App Protection before release

• Validate detection and response mechanisms for rooting, jailbreaking, debugging, Frida instrumentation, hooking, app repackaging, runtime tampering, screen sharing, overlays, and suspicious malware behavior

• Attempt to bypass protection mechanisms using real-world mobile security techniques and attacker tools

• Collaborate closely with Mobile Reverse Engineers and SDK Developers on features, regressions, fixes, and release readiness

• Review and challenge features delivered by the mobile security engineering team, including deep-level application protection and RASP functionality

• Prepare structured findings with steps to reproduce, tools used, expected vs. actual behavior, and severity

• Distinguish product defects from OS limitations, device-specific behavior, or test environment issues

• Set up and maintain Android and iOS test environments (clean, rooted, jailbroken, and modified devices)

• Maintain internal test apps, scripts, test data, and automation utilities for repeatable RASP testing

• Improve security test coverage by maintaining test cases, attack scenarios, regression checks, and technical documentation

Requirements

• Experience with mobile application security testing, mobile reverse engineering, penetration testing, or technically oriented security QA

• Good understanding of Android application internals and at least basic knowledge of iOS

• Practical experience with rooted Android devices; experience with jailbroken iOS devices

• Experience with mobile security tools such as Frida, Objection, JADX, apktool, LLDB, GDB, Magisk, Xposed/LSPosed, MobSF, or similar utilities

• Understanding of RASP and related concepts: anti-tamper, anti-debugging, anti-hooking, obfuscation, runtime protection, malware detection

• Ability to think from an attacker’s perspective and explore potential bypass paths

• Basic scripting skills (e.g., Python or Bash)

• Git and basic software development workflow knowledge

• Strong analytical thinking, attention to detail, curiosity, and persistence

• Czech C1+ and English B2+/C1 for clear technical documentation, tickets, and test reports

Benefits

• Modern cybersecurity products built to high industry standards

• Latest MacBook configuration

• Work with AI tools to support development

• Great freedom in work timing and location (results-focused)

• Opportunity to work on both open-source and closed-source projects

• MultiSport card

• Skilled colleagues who support growth and boundary-pushing work

• Salary: 80,000–120,000 CZK/month (based on experience)