{"id":2801645,"url":"https://alion.io/job/talakunchi-mobile-appsec-sme","title":"Mobile Appsec - SME","company":{"id":4442710,"name":"Talakunchi Networks Pvt Ltd","domain":"talakunchi.com","url":"https://alion.io/company/talakunchi","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Charles Proxy","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"JavaScript","optional":false},{"name":"MobSF","optional":false},{"name":"Objection","optional":false},{"name":"OWASP","optional":false},{"name":"Postman","optional":false},{"name":"Python","optional":false},{"name":"CI/CD","optional":true},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2025-12-22T07:34:29Z","employer_posted_date":"2025-12-22","last_verified_at":"2026-10-18T06:15:27Z","board_verified":true,"closed_at":null,"days_open":299,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":299},"description":"Key Responsibilities\nPerform security testing of Android and iOS mobile applications used in digital payment ecosystems\nConduct manual and automated mobile security testing aligned with:\nOWASP Mobile Top 10\nOWASP MASVS & MSTG\nIdentify vulnerabilities related to:\nInsecure data storage\nWeak cryptography\nInsecure communication\nAuthentication & authorization flaws\nBusiness logic issues in payment flows\nPerform runtime instrumentation and dynamic analysis using:\nFrida, Objection, Xposed\nReverse engineer mobile applications using:\nAPKTool, JADX (Android)\nBasic iOS reverse engineering tools (class-dump, Hopper, Ghidra)\nIntercept and analyze mobile traffic using:\nBurp Suite (Mobile Assistant preferred)\nmitmproxy / Charles Proxy\nTest mobile backend APIs supporting payment workflows using:\nBurp Suite, Postman\nValidate security of payment features, including:\nUPI, wallets, cards, tokenization\nOTP, MFA, session management\nPrepare high-quality vulnerability reports with:\nRisk assessment\nProof of Concept (PoC)\nClear remediation guidance\nSupport retesting and vulnerability closure\nWork closely with development and product teams to explain findings and fixes\nR&D Mindset & Innovation (Mandatory)\nStrong research-driven mindset to explore vulnerabilities beyond standard checklists\nAbility to research and validate new attack vectors in mobile and FinTech environments\nRegularly analyze:\nNew Android/iOS versions and security changes\nAdvanced bypass techniques (SSL pinning, root/jailbreak detection)\nDevelop custom test cases for complex payment and business logic scenarios\nContribute to:\nInternal tools, scripts, and testing methodologies\nKnowledge sharing and security best practices\nAbility to independently validate false positives and negatives\nScripting & Automation Skills (Mandatory)\nHands-on scripting experience in one or more of the following:\nPython - automation, PoC development, API testing\nJavaScript - Frida hooks and runtime manipulation\nBash - automation and tooling\nAbility to:\nWrite and modify custom Frida scripts\nAutomate repetitive testing and analysis tasks\nCustomize open-source tools for specific app behaviors\nStrong understanding of secure coding flaws through runtime and code-level analysis\nMandatory Skills & Experience\n3-4 years of experience in mobile application security testing\nStrong understanding of Android and iOS security architectures\nHands-on experience with:\nMobSF, AndroBugs, QARK\nFrida, Objection\nBurp Suite\nExperience testing BFSI / FinTech / Digital Payment applications\nStrong knowledge of:\nOWASP Mobile Top 10\nOWASP API Top 10 (supporting APIs)\nGood to Have\nExposure to PCI-DSS, RBI, or CERT-In security requirements\nExperience with CI/CD integration for mobile security testing\nBasic understanding of cloud and backend security supporting mobile apps\niOS security testing experience is a strong plus","description_format":"text","description_chars":2853,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-18T02:56:24Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.151,"p_room":0.28,"age_days":299,"expected_fill_days":21,"reasons":["conf:0","ghost","win:tail","crowd:"],"computed_at":"2026-10-18T06:31:00Z"},"pay":null,"html_url":"https://alion.io/job/talakunchi-mobile-appsec-sme","json_url":"https://alion.io/job/talakunchi-mobile-appsec-sme.json","meta":{"generated_at":"2026-10-18T06:31:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9637,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4442710},"rest":"https://alion.io/mcp/rest/get_company?id=4442710"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftalakunchi-mobile-appsec-sme"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftalakunchi-mobile-appsec-sme"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftalakunchi-mobile-appsec-sme"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/talakunchi-mobile-appsec-sme\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftalakunchi-mobile-appsec-sme"}]}