Mobile App Security Engineer

Overview

Protect native iOS and Android applications and their backend connections by embedding mobile security into development and release processes.

What you'll do

• Assess and review native iOS and Android applications built with Swift and Kotlin.
• Apply OWASP MASVS and MASTG to define security requirements and test coverage.
• Assess secure storage, sensitive data handling, sessions, tokens, and data leakage.
• Implement and test transport security, including certificate validation and pinning.
• Evaluate tamper detection, jailbreak/root detection, anti-debugging, and runtime protection.
• Work with API and backend teams on authentication, authorization, and secure communication.
• Own SC TRM and BNM RMiT mobile controls, remediation, release controls, and audit support.

What you'll need

• 3+ years in mobile development, mobile security, or mobile penetration testing.
• Degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• Experience with SC TRM and BNM RMiT controls relevant to mobile applications.
• Hands-on native iOS development or review using Swift.
• Hands-on native Android development or review using Kotlin.
• Practical knowledge of OWASP MASVS, MASTG, mobile threat modeling, and testing tools.
• Strong English communication skills.

Details

• Location: Global.
• English is the main working language across global teams.