IT Security Analyst - Penetration Testing (Mobile Application & Thick Client Penetration Testing

Wolters Kluwer Global Business Services (GBS) is designed to provide services to the business units in the areas of technology, sourcing, procurement, legal, finance, and human resources. These global centers promote team collaboration using best practices around a specific focus area to drive results and enhance operational efficiencies. There is a constant endeavor to benchmark against best-in-class industry standards to improve the quality of deliverables, increase cost savings, enhance productivity and reduce time to market for products and applications.

We have an amazing opportunity for an IT Security Analyst (Mobile Application & Thick Client Penetration Testing), available within our Global Business Services division! This position has been created due to growth! The IT Security Analyst (Mobile Application & Thick Client Penetration Testing) will be an integral part of our Attack Surface Management (ASM) and will be responsible for ensuring the operation and delivery of critical security services to protect and enhance the confidentiality, integrity, and availability of Wolters Kluwer assets. This position is remote.

As the IT Security Analyst (Mobile Application & Thick Client Penetration Testing), you will assist in efforts to strengthen the secure configuration and hardening of systems within Wolters Kluwer. In this role, you will be required to demonstrate proficiency in systems configuration, data gathering and information synthesis in various areas of IT security including penetration testing.  Your role will also include interfacing with and responding to internal business unit IT representatives and stakeholders at all levels during performance of your duties. 

Responsibilities:
We are looking for a seasoned security practitioner who goes beyond automated scanning. In this role, you will be our subject matter expert for complex application assessments, focusing specifically on Mobile (iOS/Android) and Thick Client (Desktop) architectures. You will have the freedom to reverse engineer proprietary protocols, write custom exploits, and guide our engineering teams on secure architecture for our most critical applications.

Skills:

• Deep-Dive Mobile Assessments: Perform manual penetration testing and runtime manipulation (instrumentation) on complex iOS and Android applications, specifically targeting logic flaws and hybrid framework vulnerabilities.
• Thick Client & Protocol Analysis: Reverse engineer desktop applications (.NET, C++, Java) and intercept non-HTTP proprietary traffic to identify security gaps in legacy and modern client-server architectures.
• Custom Exploit Development: Move beyond "push-button" tools by writing custom scripts (Python, Frida, etc.) to demonstrate proof-of-concept exploits and bypass client-side controls.
• Strategic Remediation: Partner with developers to fix root causes. You won't just report bugs; you will provide code-level guidance and secure design patterns to prevent them.
• Tooling & Automation: Build internal tools and integrate security checks into the CI/CD pipeline to scale our offensive security capabilities.

Our Interview Practices

To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we’re getting to know you—not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process.

Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.