Appsec Senior Cybersecurity

Mobile Application Security • Perform security assessments and reverse engineering (APK/IPA static analysis) for iOS and Android . • Test runtime protections (SSL pinning, root/jailbreak detection) and perform dynamic analysis using Frida, Objection, and Burp . • Validate compliance against OWASP MASVS and secure implementations of OAuth, tokens, and local storage. Hands-On Engineering & Automation • Conduct manual and automated code reviews. • Implement and tune SAST, DAST, and SCA tools, alongside API and container security scanning. • Build and enforce CI/CD security gates and work directly with developers to patch code/pipelines. Threat Modeling & Validation • Conduct practical threat modeling focusing on real exploitability rather than theoretical risks. • Validate vulnerabilities through hands-on testing using tools like Burp Suite and OWASP ZAP . Experience Level: 7+ years in Cybersecurity with a heavy focus on Application Security. Education: Bachelor’s degree in Cybersecurity or a related field. Core Core Experience: Proven background in Secure SDLC within delivery-focused projects. Experience operating within fixed-price or commitment-based environments , balancing security with tight timelines and budgets. Proven ability to personally fix vulnerabilities in code/pipelines and demonstrate actual exploit paths. Certifications: • Management/Architecture: CISSP and/or CSSLP • Hands-on/Offensive: OSCP, GWAPT, eWPT, or eWPTX Nice-to-Have Skills • Cloud security expertise ( AWS, Azure, or GCP ). • Kubernetes and container security. • Experience working within regulated industries.