Mobile Security Analyst

WHAT WE’RE LOOKING FOR

• Strong hands-on experience in security testing mobile applications.
• Strong hands-on experience of reverse engineering mobile applications (iOS and Android),
• Hands-on experience in security testing of web applications and APIs.
• Practical understanding of mobile platform security mechanisms: secure enclave/hardware-backed keystores, platform attestation (e.g. Android Key Attestation, iOS DeviceCheck/App Attest).
• Strong knowledge of common vulnerability classes affecting mobile, web and API environments.
• Good understanding of secure development lifecycle practices and how security findings can be translated into engineering action.
• Ability to analyze technical findings precisely and explain them clearly to different stakeholders.
• Strong written and verbal communication skills in English, especially in discussions with development teams and external researchers.
• Sound judgment and the ability to make risk- and impact-based decisions, including under time pressure.
• Structured and reliable way of working, including clear documentation and consistent follow-up.

NICE TO HAVE

• Direct experience working with bug bounty or vulnerability disclosure programs.
• Familiarity with common severity rating approaches such as CVSS and with risk-based vulnerability prioritization.
• Experience supporting remediation in agile or product-oriented engineering environments.
• Prior exposure to threat hunting methodology or mobile threat intelligence feeds.
• Experience with digital identity, wallet or credential systems (e.g. OpenID4VCI, mDL/mDoc, eIDAS) and their mobile security implications.
• Understanding of modern authentication and authorization patterns in API-centric systems.
• Degree in information security, computer science, cybersecurity or a related field, or equivalent practical experience.
• Working understanding of the German language.

WHAT WE OFFER

• A chance to shape one of Germany’s most important digital public infrastructures
• A forward-thinking, mission-driven work culture at the intersection of science, administration, and innovation
• Flexible working hours and remote work from Germany
• Competitive compensation commensurate with the level of responsibility
• Access to conferences, team events and a supportive work culture.

DIVERSITY MATTERS TO US

We value different perspectives and experiences. That’s why we welcome applications from everyone, regardless of gender, nationality, ethnic or social background, religion or belief, disability, age, sexual orientation, or gender identity.