JPC-221275 - Penetration Test Engineer
Job Posted: May 14, 2024 | Total views: 1

Job Description:

• Job Description

   

   

   

  JD ->   Knowledge of how to put into practice the OWASP Security Testing Standard. In the general sense a mobile app pen tester needs the same sort of mindset as any other type of pen tester – the ability to notice “odd” behavior and the initiative to investigate it. Good pentesters have the drive to keep digging and enjoy solving puzzles. Tools and procedures can be lea
  ed, but the “knack” or “hacker gene” is something that the person must have developed on their own or they will never be a top level tester.

   

   

   

  As far as tools, the baseline is the same as web app pen testing, e.g. Kali, Burp, Python, wireshark, radare, etc. For mobile app specific tools, there’s Frida, MARA, Cydia, and others – there are multiple platforms that can accomplish the same thing, so to an extent it’s the tester’s preferences. In addition to the basic scripting skills necessary for most pen testing, a mobile pen tester should have experience with Java and Objective-C as those are the main languages for app development, as well as javascript since that’s how Frida interactions are done (as mini JS scripts to control the app and hook function calls). Ideally a tester will have experience as a mobile app developer, since it’s easier to understand the disassembly of an app if you understand how it was put together in the first place. A good understanding of jailbreaking, certificate management, and MITM operations are also necessary since natively the mobile application and the device will not allow MITM.

About Company :
Purview is a leading Digital Cloud & Data Engineering company headquartered in Edinburgh, United Kingdom having a presence in 14 countries India (Hyderabad, Bangalore, Chennai and Pune), Poland, Germany, Finland, Netherlands, Ireland, USA, UAE, Oman, Singapore, Hong Kong, Malaysia and Australia.

We have a strong presence in UK, Europe and APEC, providing services to Captive Clients (HSBC, NatWest, Northern Trust, IDFC First Bank, Nordia Bank etc) in fully managed solutions and co-managed capacity models. Also, we support various top IT tier 1 organisations (Capgemini, Deloitte, Wipro, Virtusa, L&T, CoForge, TechM and more) to deliver solutions and workforce/resources.

Company Info: