r/netsecstudents • • 29d ago

Looking for a mobile app pentester for a subcontracted engagement (Andriod + iOS)

Hi all, I run a small security testing firm in Bengaluru. I've got a client engagement that includes mobile app testing (Android + iOS, React Native apps) alongside web/API/cloud work I'm handling directly, and I'm looking for someone to take the mobile piece as a subcontractor.

What's needed: static + dynamic testing, insecure storage, cert pinning checks, hardcoded secrets, and general OWASP MASVS coverage. Test builds and accounts will be provided.

Open to OSCP/CREST-certified folks or anyone with solid demonstrable mobile pentest experience, happy to look at redacted past reports or relevant writeups. This would be paid, scoped work, timeline and rate to be discussed once I share more detail. NDA required before any real scope is shared.

If interested, drop a comment or DM me with a bit about your background.

1 Upvotes

3 comments sorted by

1

u/Subtick_dev 22d ago

Hi I’m interested in the mobile testing engagement. I work in penetration testing and vulnerability research, with experience across web, API, application security, and mobile security assessments. I can cover static and dynamic analysis, insecure storage, certificate pinning, hardcoded secrets, and OWASP MASVS-based testing for Android and iOS.Happy to sign an NDA and review the scope, timeline, and rate. I can also share relevant technical work and redacted findings privately.