Mobile Security Engineer

About The Role

As a Mobile Security Engineer, you will conduct thorough security evaluations of mobile applications prior to their launch. This includes analyzing how data is stored on the user's device, inspecting the communication between the app and its backend services, and determining if the client-side app could be manipulated to access unauthorized features. Additionally, you will perform security assessments on the APIs that support the app, as these often harbor the most exploitable vulnerabilities. An important aspect of this position is guiding the mobile development teams on which security protections deliver value relative to their engineering effort.

Responsibilities

• Evaluate Android and iOS application builds before they are released.
• Perform security testing on the APIs that the mobile apps interface with, ensuring comprehensive coverage beyond just the apps themselves.
• Provide expert recommendations to development teams on implementing security safeguards that are cost-effective and worthwhile.

Qualifications

• Proficiency in mobile reverse engineering, specifically using tools such as Frida or equivalents.
• Deep understanding of mobile platform security frameworks beyond checklist-style approaches.
• Ability to read and analyze source code written in Java or Kotlin for Android, and Swift or Objective-C for iOS.

Preferred Experience

• Contributions to publicly available mobile security research.
• Experience working with applications related to payments or banking sectors.