About the role
Requirements:
- 2-6 years of hands-on native mobile development experience (Android and/or iOS); strong depth on one platform with working knowledge of the other is fine.
- Proven experience building and shipping SDKs (not just apps) consumed by external partners; you understand versioning, backward compatibility, and public API design.
- Solid understanding of device security fundamentals: root/jailbreak detection, anti-tampering, and code obfuscation.
- Working knowledge of device fingerprinting techniques and privacy-conscious identity signal generation.
- Familiarity with RASP concepts and implementation: runtime integrity checks, hooking/injection detection.
- Strong grasp of platform security primitives: Android Keystore / Play Integrity API, iOS Keychain / Secure Enclave / App Attest.
- Comfort working across Kotlin/Java (Android) and/or Swift/Objective-C (iOS).
- Experience debugging across a wide range of real devices and OS versions, not just emulators.
Good to Have:
- Experience with obfuscation/protection tooling (ProGuard/R8 DexGuard, iXGuard, or similar).
- Familiarity with the reverse-engineering tools attackers use (Frida, Xposed, Cydia Substrate, jadx, Hopper); understanding offence sharpens defence.
- Experience integrating with banking or fintech apps, or working under RBI/PCI-DSS-adjacent constraints.
- NDK/C++ experience on Android or low-level iOS security work.
- Experience with certificate pinning, mutual TLS, or other secure-transport hardening.
- Contribution to a published SDK/library with real external developer adoption.