Mobile App Security Engineer
Core
Protect native iOS and Android applications and their backend connections by integrating security into development and release processes.
Role type
Mobile App Security Engineer
Builds
Secure mobile applications and API integrations for BJAK's financial platform
Domain
Fintech / Mobile Security
Required skills
Native iOS (Swift) and Android (Kotlin) development/review, OWASP MASVS/MASTG, secure local storage (Keychain/Keystore), certificate pinning, tamper/root detection, API security, mobile threat modeling
Preferred skills
Experience with SC TRM and BNM RMiT controls, mobile penetration testing, runtime protection controls
Technologies
Swift, Kotlin, OWASP MASVS, MASTG, Keychain, Keystore
Responsibilities
Assess and review native iOS and Android applications; Apply OWASP MASVS and MASTG to define security requirements; Implement transport security and tamper detection controls; Work with API and backend teams on authentication and secure communication; Own mobile security controls for regulatory compliance (SC TRM, BNM RMiT)
Seniority
Mid-level, hands-on IC