{"id":3167221,"url":"https://alion.io/job/tata-group-mobile-app-payments-red-teaming-engineer","title":"Mobile App Payments & RED Teaming Engineer","company":{"id":3198,"name":"Tata Group","domain":"tata.com","url":"https://alion.io/company/tata","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Mobile","role_family":"Mobile","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Burp Suite","optional":false},{"name":"Charles Proxy","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"JavaScript","optional":false},{"name":"MobSF","optional":false},{"name":"Objection","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-10-23T17:36:00Z","employer_posted_date":null,"last_verified_at":"2026-10-23T17:36:00Z","board_verified":false,"closed_at":null,"days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"We are seeking a highly skilled Mobile App Payments and Red Teaming Engineer to strengthen the security posture of our mobile payment ecosystem through advanced offensive security testing and adversary simulation exercises. The role will focus on identifying vulnerabilities within mobile applications, payment systems, APIs, backend infrastructure, and associated digital assets through penetration testing and realistic red-team engagements. The ideal candidate should possess strong expertise in mobile application security, payment security standards, adversary simulation techniques, and offensive security methodologies.\n\nThe candidate will have responsibilities across the following functions: \n\nMobile Application Security Assessment: \nPerform penetration testing on Android and iOS mobile applications.\nAssess the security posture of mobile payment applications and digital wallets.\nConduct static and dynamic application security testing (SAST/DAST).\nPerform API security testing for payment interfaces and backend services.\nAnalyse authentication mechanisms including OAuth, JWT, SSO, biometrics, and MFA implementations.\nIdentify vulnerabilities such as insecure data storage, broken authentication, improper session management, reverse engineering risks, code tampering, SSL pinning bypass issues, runtime manipulation risks, and root/jailbreak detection bypasses.\n\nPayment Security Assessment: \nConduct security assessments on payment gateways, UPI integrations, digital wallets, card payment ecosystems, tokenisation mechanisms, and QR payment implementations.\nValidate compliance with PCI-DSS, PCI Secure Software Standards, OWASP MASVS, OWASP Mobile Top 10 and payment industry security controls.\n\nRed Team Operations: \nDesign and execute realistic adversary simulation exercises.\nConduct red-team assessments across mobile, cloud, API, and payment environments.\nEmulate attacker tactics, techniques, and procedures (TTPs).\nPerform phishing simulation exercises, social engineering assessments, credential attack simulations, lateral movement testing, privilege escalation exercises, and persistence techniques validation.\nMap findings against the MITRE ATT& CK framework.\n\nSecurity Research and Threat Intelligence: \nResearch emerging attack vectors impacting mobile payment ecosystems.\nAnalyse fraud trends and evolving threats targeting digital payment platforms.\nDevelop proof-of-concept exploits for identified vulnerabilities.\nRecommend mitigation strategies and security improvements.\n\nThe core requirements for the job include the following:\n\nMobile Security: \nAndroid and iOS architecture knowledge.\nReverse engineering tools: APKTool, Jadx, Ghidra, IDA Pro.\nDynamic analysis tools: Frida, Objection, Burp Suite, MobSF, Charles Proxy.\n\nOffensive Security: \nWeb and API security testing.\nNetwork security assessment.\nRed Team methodologies.\nMITRE ATT& CK framework.\nAdversary emulation.\nProgramming/Scripting: Experience in one or more: Python, Java, JavaScript, Bash, PowerShell.\n\nSecurity Knowledge: \nOWASP Top 10\nOWASP Mobile Top 10\nOWASP MASVS\nPCI DSS\nSecure SDLC\n\nPreferred Certifications and Education: \nOSCP (Offensive Security Certified Professional).\nBachelor's or Master's degree in Computer Science, Information Security, Cyber Security, Engineering, or equivalent practical experience.\n\nDesired Attributes: \nStrong analytical and problem-solving skills.\nAbility to think like an attacker.\nStrong communication and reporting skills.\nAbility to explain technical findings to executive stakeholders.\nExperience working in Agile and DevSecOps environments.\nStrong documentation and presentation skills.\n\nSuccess Metrics: \nCritical vulnerabilities identified and remediated.\nImprovement in mobile payment application security posture.\nRed-team exercise effectiveness and coverage.\nReduction in recurring security findings.\nSecurity control maturity enhancement.\nSkills\nAPI, Android, Burp, Frida, Ghidra, Jadx, MITRE, MobSF, OSCP, OWASP MASVS, PCI DSS, iOS, mobile, payment","description_format":"text","description_chars":4004,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Hotels & Resorts","Air Transport","Commercial Aviation"],"lifecycle":[{"event":"open","at":"2026-10-23T17:36:00Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.899,"p_room":0.9,"age_days":10,"expected_fill_days":27,"reasons":["seen:10","velocity","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/tata-group-mobile-app-payments-red-teaming-engineer","json_url":"https://alion.io/job/tata-group-mobile-app-payments-red-teaming-engineer.json","meta":{"generated_at":"2026-11-03T19:22:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1528,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3198},"rest":"https://alion.io/mcp/rest/get_company?id=3198"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftata-group-mobile-app-payments-red-teaming-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftata-group-mobile-app-payments-red-teaming-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftata-group-mobile-app-payments-red-teaming-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tata-group-mobile-app-payments-red-teaming-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftata-group-mobile-app-payments-red-teaming-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3167221}},{"tool":"search_jobs","arguments":{"company":"tata.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3167221},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}