Senior Mobile Security Engineer (Android/iOS)

About this role

<p>Key Responsibilities:&nbsp;<br>● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection),&nbsp;<br>Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms.&nbsp;<br>● Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to&nbsp;<br>prevent Man-in-the-Middle (MitM) attacks.&nbsp;<br>● Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or&nbsp;<br>snapshots. Secure usage of Android Keystore and iOS Keychain.&nbsp;<br>● Mobile Design Components: Deliver new security design patterns and components&nbsp;<br>for Mobile security. Create reusable libraries for biometric login, secure storage, and&nbsp;<br>device attestation that feature teams can easily drop into their code.&nbsp;<br>● Pentesting: Regularly decompile and attack our own binaries to verify defenses.&nbsp;</p> <p>Technical Requirements:&nbsp;<br>● Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.&nbsp;<br>● Experience with mobile security frameworks (OWASP MASVS).&nbsp;<br>● Hands-on experience with reverse engineering tools (Frida, Ghidra, MobSF).&nbsp;<br>● Understanding of Biometric authentication flows (FaceID/TouchID implementation).&nbsp;</p>

View the original posting ↗