Mobile app security expert WANTED!

Job Description:
Search for security vulnerabilities in Android/iOS apps and in the most diverse web applications and web services. Testing of mobile applications involves detailed testing of mobile applications and relevant web services in accordance with the OWASP Mobile Security Testing Guide. The result of the testing is documented by creating a final report in English (or Czech/Slovak).

Prerequisites for the candidate:

Preferential conditions for the candidate:

  • “developer” experience in creating large-scale web or mobile applications (Java, .NET, C)
    knowledge of reverse engineering and disassembly
  • any experience in penetration testing of mobile and web applications
    knowledge of OWASP Mobile Security Testing Guide and OWASP Web Security Testing Guide
    knowledge of Android, iOS operating systems, and web services

As a company we offer:

  • freedom to choose every project and reward (read The Most Free company), possibility to work remotely and according to the individual needs of the candidate
  • excellent working team and the opportunity to learn a lot
  • secured personal development (reimbursement of all relevant security certificates, security conferences or training, etc.)

Possible start date: immediately

Contact for sending your CV: jobs@nethemba.com.

more insights

Critical security problem in UpdraftCentral: an attacker holding the service’s keys planted a backdoor on our websites

On the night of 19 October 2026 an attacker abused UpdraftCentral, the remote management service built into UpdraftPlus, a backup plugin with more than 4 million installations, and planted a backdoor on two of our three websites. Our sites were fully up to date and the fault was not on our side: the attacker signed the commands with valid keys that the UpdraftCentral Cloud service generates and keeps. We publish an analysis of the backdoor, indicators of compromise and a way to check your own sites. The vendor later confirmed that the attacker obtained the teamupdraft.com customer database, including UpdraftCentral keys.

Read more >
A broken seal of the commercial register leaking records containing birth numbers

The State as the Biggest Threat to Your Privacy

A senseless Slovak statute published the birth numbers, addresses and certified signatures of company directors — and it is not a bug, it is written into Section 100(3). We are convinced the greatest threat to citizens privacy today is the state itself.

Read more >