Information Security Engineer (AppSec Mobile)

Requirements

Hands-on experience in mobile security, with a proven track record of identifying and mitigating security vulnerabilities
Extensive experience in mobile application development, with proficiency in Kotlin or Android SDK
A solid understanding of security protocols, encryption, and authentication mechanisms
Knowledge of relevant security frameworks, such as OWASP MASVS
Expertise implementing and bypassing controls like certificate pinning, facial recognition, and biometric authentication controls
Experience with secure coding practices and familiarity with industry standards (e.g., ISO 27001, NIST)
Background in modifying the Android HAL and kernel-level programming
Familiarity with SE Linux and secure boot environments
Expertise in Android device drivers, especially camera-related modules
Understanding of custom kernel compilation for Android
Knowledge of Android 10 system internals

Experience developing virtual camera drivers or working with media injection in Android systems
Experience with Google’s AOSP and custom ROM development

Supporting security, technology, and business teams with expertise and guidance on key initiatives
Conducting thorough security assessments of mobile applications, identifying vulnerabilities and potential attack vectors
Leading efforts to implement and enhance security controls in mobile applications
Collaborating closely with the development team to ensure security is integrated into the SDLC (Secure Development Lifecycle)
Researching and staying up-to-date with the latest mobile security threats, trends, and best practices
Developing and delivering security training and awareness programs for the development team
Researching methods to simulate camera injections on Android devices for security testing
Developing detection techniques for identifying camera injection attempts
Establishing a new team focused on secure Biometric Identification solutions