Introduction
ECQ (E-CQURITY) is a leading information system security firm established to provide security assessment services and proactive security management solutions. In face of the ever changing technology, we ensure our customers always have the best protection for their business through our continuous innovation, dedication, and enthusiasm in exploring security technology's domain.
We are looking for a dedicated Mobile Pentester to join our passionate offensive security team of talented security researchers. If you're someone who loves exploring how things work - and how to make them more secure - we need you on board. You'll be part of our ambitious ongoing and upcoming projects, working alongside talented professionals to push the boundaries of mobile security testing.
Find more about us at: https://e-cq.net/
Job Description
- Perform in-depth security testing of mobile applications through static code analysis, dynamic runtime testing, and API endpoint evaluation.
- Reverse engineer mobile binaries to uncover vulnerabilities, misconfigurations, and insecure implementations of authentication, encryption, or data storage.
- Identify and validate issues such as insecure data storage, improper certificate pinning, weak crypto, and insecure communication channels.
- Develop and maintain custom testing scripts or plugins (Python, Bash, PowerShell) to automate tasks and improve test efficiency.
- Customize and extend analysis tools (etc. mobile testing frameworks) to support advanced or proprietary app environments.
- Research emerging mobile security trends, anti-tampering techniques, and defense mechanisms to continuously improve assessment methodologies.
- Perform limited, non-destructive exploitation (proof-of-concept only) and avoid actions likely to disrupt production.
- Other tasks related to your profession as assigned by direct supervisors.
Requirements
- Proven experience in mobile application penetration testing for both iOS and Android.
- Ability in reverse engineering tools (IDA, Ghidra, etc.) and dynamic analysis tools (Frida, Objection, MobSF).
- Knowledge of mobile app security controls, including root/jailbreak detection, obfuscation, and runtime protections.
- Familiar with API testing and mobile backend analysis.
- Scripting proficiency (Python, Bash, or PowerShell).
- Degree and/or certification related to information security, cybersecurity, or related field (nice to have).
- Strong analytical mindset, adaptability, and continuous learning attitude.
Our offers
- Attractive remuneration package with competitive compensation scheme.
- 14 days annual leave with increment of 01 leave for each 03 years of continuous service.
- Wellness leave (4 days per year), birthday leave, and other attractive paid leave schemes per the Company's policies.
- Bonuses: Public holiday, Tet holiday, project, 13-month salary, etc. (subjected to company's discretion).
- Free lunch, cafeteria, and parking.
- A comfortable working environment that values flexibility, friendliness, and supportive team spirit.
- Recreational activities: Company trip, team building, bonding, internal events, etc.
- Premium private healthcare insurance after successful completion of probation.
- Annual premium health check-up package.
- Continuous learning - sharing - improvement culture, encouraging initiative and creativity in problem-solving.
- Career growth opportunities depending on your capability and career goals.
Working location: Hoang Hoa Tham St., Gia Dinh Ward (Binh Thanh District), HCMC
Working hours: 9a.m. to 6p.m., Monday to Friday
Contact: ECQ HR Department (Mr. Hien - 0382 480 012 or [Confidential Information])
Send your resume to [HIDDEN TEXT]for application and/or further information.
