Mobile Application Assessor

• Perform manual and automated security assessments of mobile applications, APIs, and underlying backend services
• Verify application compliance with organizational policies, industry standards, and regulatory requirements
• Maintain detailed documentation of assessment findings, metrics, and recommendations
• Monitor emerging mobile technologies, security threats, and industry best practices
• Research mobile application documentation to outline secure configurations and potential risks
• Assess the risk posture and exposure of misconfigured mobile technologies
• Develop guardrails to ensure mobile technologies are deployed in a secure configuration
• Evaluate and recommend security software/hardware and its integration into existing architecture
• Create security matrix checks from security configurations
• Apply appropriate security controls to checks from the required compliance framework
• Conduct peer reviews for additional matrix checks
• Work closely with teams to identify vulnerabilities and ensure mobile applications meet industry security and privacy standards

• Active Top Secret clearance
• Bachelor’s Degree in Computer Science, Information Technology, or related field
• 5+ years of dedicated application security experience with a strong focus on mobile platforms
• Deep knowledge of OWASP Mobile Top 10, mobile OS architecture, secure local storage, cryptographic practices, and OAuth/OpenID Connect flows
• Familiarity with NIST RMF
• Understanding of mobile security principles and vulnerability assessment techniques
• Strong analytical, troubleshooting, and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work independently and collaboratively in a team environment
• Preferred:
  Experience with mobile application security testing tools (Now Secure, etc.)
• Preferred:
  Experience supporting federal industry environments

Demonstrates expertise in performing security assessments of mobile applications and APIs, ensuring compliance with industry standards and regulatory requirements. Proficient in applying security controls and developing secure configurations for mobile technologies.

• Active Top Secret Clearance
• 5+ Years Application Security Experience
• Deep Knowledge of OWASP Mobile Top 10
• Familiarity with NIST RMF
• Experience with Mobile Application Security Testing Tools

• Mobile Application Security
• Vulnerability Assessment Techniques
• Secure Local Storage
• Cryptographic Practices
• OAuth/OpenID Connect Flows
• Security Controls Application
• Risk Assessment
• Security Documentation
• Security Matrix Checks
• Mobile OS Architecture

• Analytical Skills
• Troubleshooting Skills
• Problem‑Solving Skills
• Written Communication Skills
• Verbal Communication Skills
• Team Collaboration

• Mobile Security Principles
• Compliance Framework
• Federal Industry Environments
• Emerging Mobile Technologies
• Security Threats
• Best Practices

• Now Secure
• Security Software
• Security Hardware