Senior Mobile Security Engineer (Android/iOS)
Encora
Apply to this jobKey Responsibilities:
● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection),
Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms.
● Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to
prevent Man-in-the-Middle (MitM) attacks.
● Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or
snapshots. Secure usage of Android Keystore and iOS Keychain.
● Mobile Design Components: Deliver new security design patterns and components
for Mobile security. Create reusable libraries for biometric login, secure storage, and
device attestation that feature teams can easily drop into their code.
● Pentesting: Regularly decompile and attack our own binaries to verify defenses.
Technical Requirements:
● Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.
● Experience with mobile security frameworks (OWASP MASVS).
● Hands-on experience with reverse engineering tools (Frida, Ghidra, MobSF).
● Understanding of Biometric authentication flows (FaceID/TouchID implementation).
Summary
Develop mobile security features, perform pentests, and enhance app protection for Android and iOS.
Job title
Senior Mobile Security Engineer (Android/iOS)
Experience level
senior level
Minimum experience
5+ years exp
Industry
software
Location requirements
Kuala Lumpur, no remote work allowed
Salary
Not specified
Management role
No
Required skills
Preferred skills
Specializations
Structured locations inferred from the posting.
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia