Mobile Application Security Lead (AppSec)
Mumbai · Mid Level
Applicants who checked fit first are 3.1× more likely to hear back
Your score for this role already exists
ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.
No credit card · 1 tap with Google
What we know about this role
MEDIUM
Talakunchi is reviewing applications at a steady pace. Expect a standard response time as they evaluate the current pool.
First 72 hours
Window passed - posted 439d agoEarly applicants get seen before the pile builds.
Not a repost
The first time we've seen this listing - it hasn't been closed and reopened.
Skills required
14 listedYou almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.
Job description
Job Title: Mobile Application Security Lead (AppSec)
Location: Mumbai
Experience Required: 4–5 Years
Job Type: Full-time, On-site
Job Overview:
Talakunchi Networks Pvt Ltd is seeking a skilled and motivated Mobile Application Security Lead to oversee and deliver comprehensive security assessments across Android and iOS platforms. The ideal candidate will have a strong background in mobile app penetration testing and will serve as both a technical lead and client-facing expert, ensuring high-quality delivery across multiple engagements.
Key Responsibilities:
- Lead and execute mobile app security testing for Android and iOS platforms.
- Perform both automated and manual penetration testing including:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Runtime instrumentation and analysis
- Reverse engineer APKs/IPAs to identify vulnerabilities such as hardcoded secrets and logic flaws.
- Identify and report security issues based on OWASP Mobile Top 10, insecure storage, transport layer issues, and platform-specific flaws.
- Use advanced tools: Frida, Objection, MobSF, Burp Suite, Jadx, APKTool, Xposed, Postman, etc.
- Prepare detailed technical reports with:
- Risk ratings (CVSSv4/custom)
- Proof of Concept (PoC)
- Practical remediation recommendations
- Interact with client-side stakeholders such as AppDev, QA, and InfoSec teams.
- Review and validate deliverables prepared by junior team members.
- Assist in pre-sales efforts: scope definition, effort estimation, and technical discussions.
- Mentor and train junior security analysts in mobile AppSec practices.
- Stay up-to-date with the latest mobile vulnerabilities, trends, and tools.
Required Skills:
- Strong understanding of mobile security architecture, Android/iOS internals, and sandboxing
- In-depth knowledge of OWASP Mobile Top 10 and MASVS
- Proficient in tools such as:
- Frida, Objection, Burp Suite, MobSF, Charles Proxy, APKTool, Jadx
- Postman/Insomnia for API testing
- Experience with Jailbreaking/Rooting, SSL pinning bypass, and secure coding practices
- Familiarity with software development life cycle (SDLC) and CI/CD environments
- Experience in ticketing systems like Jira, ServiceNow, etc.
Preferred Certifications:
- CEH
- eMAPT
- eWPTXv2
Bonus Points For:
- Knowledge of mobile CI/CD security pipeline
- Familiarity with banking/fintech security standards (RBI, PCI DSS, etc.)
- Experience in effort estimation and VAPT project planning
Free · no signup
Get tomorrow's jobs before you have to search
Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.
No spam. Just jobs and resources.
Why people use ASAI
Someone shared one job with you. ASAI keeps finding the rest.
Scored, not searched. Every role ranked against your actual profile.
Alerts as often as hourly. Reach new roles while the pile is still small.
Skill gaps, spelled out. See exactly which requirements you don't meet yet.
Verified jobs, only. Say no to ghost jobs. Your time deserves respect.
Keep browsing