Key responsibilities:
- Conducting security assessments of mobile applications or systems to identify potential vulnerabilities and risks.
- Develop and implement security solutions to mitigate risks and protect against cyber threats. This may involve developing and implementing encryption, authentication, and access control measures.
- Responsible for implementing and maintaining security features such as iPhone Secure Enclave, Android Hardware-backed Keystore, TEE, and Google Play Integrity API to ensure the security and integrity of mobile applications and systems.
- Provide guidance or project teams on mobile security best practices and industry standards. This may involve working closely with developers, project managers, and other stakeholders to ensure that security requirements are integrated into the software development lifecycle.
- Training and mentoring other team members on mobile security best practices and industry standards. This may involve developing training materials, educating the team on the solution by delivering training sessions to help build the team's overall knowledge and expertise in mobile security.
Requirements:
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- At least 5 years of experience in mobile security engineering or a related role.
- Strong knowledge of mobile security best practices and industry standards.
- Familiarity with mobile operating systems, such as iOS and Android, and their security features and vulnerabilities. Additionally, the candidate should be familiar with public-key cryptography and digital signatures.
- Excellent analytical and problem-solving skills, with the ability to identify and address complex security issues.
- Strong communication and collaboration skills, with the ability to work effectively with cross-functional teams.
To apply for this position, please send your CV and portfolio to agnes@aukilabs.com or use our contact us form by pressing apply.
We are an equal opportunity employer and welcome applications from all qualified candidates. Information provided will be treated in strict confidence and will only be used for recruitment-related purposes. Information of unsuccessful candidates will be destroyed within six months.
