Penetration Tester

Overview

We’re NCC Group - global leaders in cyber security and technical assurance. Right now, we’re scaling our elite Mobile Security Practice and we are looking for a deeply technical, hands-on specialist to join us.

Location: Manchester, Hybrid

You’ll be part of our Technical Assurance Services team, embedded with some of the most security-conscious clients in the UK and beyond.

Role and responsibilities

You will dissect iOS and Android applications via reverse engineering, binary instrumentation, code review, mobile malware techniques, uncovering vulnerabilities others have missed, and help clients understand risk in a language they can act on.

Your day to day

• Perform black-box assessments and source code reviews of iOS and Android apps
• Use tools, techniques, and your own ingenuity to reverse engineer and exploit mobile applications
• Travel (occasionally) for on-site engagements
• Translate complex technical findings into language that business stakeholders understand
• Mentor others, contribute to internal research, and continuously sharpen your knowledge.
• Deep knowledge of mobile security assessment methodologies
• Hands-on experience with binary instrumentation, reverse engineering, and dynamic analysis
• Fluency with Swift, Kotlin, Java, and the ability to dissect decompiled code
• Understanding of mobile OS internals, security features, and common malware techniques
• Strong communicator who can hold their own in technical deep-dives and boardroom conversations
• Experience in financial services or regulated industries
• Familiarity with tools like Jira, Bitbucket, or SDLC pipelines
• Web application or API testing experience

Why join NCC Group?

• Work with one of the most respected names in cybersecurity.
• Be part of a team that values technical excellence, autonomy, and ongoing development.
• Get access to personalised training, research time, and industry visibility.
• Contribute to high-impact projects that make a real-world difference.

Beyond this, we have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:

• Pension
• Life Assurance
• Share Save Scheme
• Maternity & Paternity leave
• Community & Volunteering Programmes
• Learning & Development

Ready to level up your mobile testing career?

Apply now and bring your expertise where it will be recognised, challenged, and developed.

About your application

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

If you do not want us to retain your details, please email . All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf (nccgroupplc.com)). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.

#J-18808-Ljbffr