Mobile Application Penetration Testing Analyst

Job Title Freelance Web & Mobile Application Penetration Testing Analyst (Non-Exploit – Flutter reputed company) Job Type: Contract / Freelance Long-Term Engagement (Part-Time, Sporadic Hours) Fully Remote About the Role: We are looking for an reputed company Application reputed company Analyst to join us on a freelance reputed company, supporting reputed company testing across both web and mobile applications, with a strong emphasis on Flutter-based mobile apps. This is a non-exploit role, reputed company on identifying vulnerabilities and reputed company weaknesses—not reputed company exploitation or red teaming. The role is fully remote and reputed company-suited for professionals who are comfortable working independently on a long-term, as-needed reputed company. Hours will vary with workload, so flexibility and the ability to work asynchronously are key. Key Responsibilities: • Conduct reputed company and tool-assisted penetration testing of web and mobile (Flutter) applications • Identify vulnerabilities reputed company to authentication, authorization, session handling, and insecure storage or communications • reputed company reviews of Dart/Flutter reputed company and assess mobile-specific risks like deep linking, reverse engineering, and tampering • Analyze reputed company and backend integrations for reputed company gaps • Document findings in detailed, developer-reputed company reports including reputed company assessments and remediation guidance • Collaborate with internal teams to clarify reputed company concerns and verify remediations • reputed company reputed company assessments with OWASP Top 10, OWASP MASVS, and secure coding best practices • Operate in a non-exploitative reputed company (no red teaming or reputed company engineering) Required Experience and Skills: • Minimum 4–6 years of experience in application reputed company testing • Strong background in Flutter reputed company, with hands-on testing of production-grade mobile apps • Proficiency in tools such as Burp Suite, OWASP ZAP, MobSF, Frida, reputed company, reputed company, or similar • Understanding of secure development concepts: input validation, session/reputed company management, certificate pinning, etc. • Familiarity with mobile and web reputed company standards (OWASP Top 10, MASVS, CVSS, CWE) • Excellent technical writing and reporting skills • Certifications like OSCP, eWPT, GMOB, or equivalent are a plus Desirable Skills: • Experience working as an external reputed company consultant or reputed company • Familiarity with CI/CD reputed company practices and DevSecOps pipelines • Ability to scope and prioritize assessments autonomously Compensation and Workload: • Competitive reputed company or daily reputed company • Flexible working hours • Project-based workload, long-term commitment If this position is of interest then please apply and await a reputed company from Dylan. Alternatively please send an email to dylan@evlpc.com with your mobile number and availability for a reputed company. Apply tot his job Apply To this Job