Android Penetration Tester

Pay: $65-70/hour W2. Our company offers our consultants a suite of benefits after a qualification period including health, vision, dental, life, and disability insurance.

Hybrid role, must be onsite 3x/week in Mountain View, CA

W2 Candidates only

• This role focuses on Pen Testing for Mobile Applications and Android APK Level. Previous interviews have been too focused on web applications and missing the Android component.
• Hybrid role – 3 days onsite.
• Must be able to read and understand Java & Python, as Java is the native language of Android.

• Develop expertise in our product solutions, deep diving into design/architecture, and execute white box and black box penetration scenarios.
• Plan, scope, and conduct vulnerability assessments and penetration tests on internal/external assets such as web applications, Android platforms, Android apps, backend APIs, and cloud services.
• Research and conduct adversary simulations for known security threats and identify client attack vectors to test system security readiness.
• Conduct threat modeling, threat intelligence, and scoping with stakeholders.
• Assist in creating and maintaining internal penetration testing practices within the QA team, managing vulnerabilities and tracking until closure.
• Build test harnesses and automation suites, and validate attack vectors in Threat Lab.
• Coordinate with program management and security architects at internal and offshore sites.
• Stay up to date on current tools, technologies, and vulnerabilities to incorporate into testing practices.
• Research and develop exploits for zero-day vulnerabilities.
• Conduct penetration tests on IoT and firmware devices.

• 5+ years of experience in penetration testing, including 2+ years in Android and 1+ year in web applications.
• Degree in cybersecurity or related security disciplines is a plus.
• Certifications in offensive security such as OSCP, OSWA, OSWE, CRTO, BSCP, or similar are a plus.
• Comprehensive knowledge of information security practices, malware, phishing attacks, attack vectors, and threat protection methods.
• Proficiency in Java, Python, or relevant programming languages.
• Malware development or reverse engineering experience is a plus.

The Fountain Group is a nationwide staffing firm with over 80 Fortune 100-500 clients. Since 2001, TFG has maintained a standard of excellence, recognized through numerous industry awards.
Our success is a team effort.

Visit our website for more information:
The Fountain Group

3407 W Martin Luther King Jr. Dr. Tampa, FL 33607

“We work in Life Sciences, Clinical, Engineering, IT, and more. Above all, we specialize in people.”