Senior Mobile Security Engineer (Android/iOS)
Encora · Kuala Lumpur
Apply directly on Encora’s careers site — no account needed.
About the role
Key Responsibilities:
● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection),
Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms.
● Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to
prevent Man-in-the-Middle (MitM) attacks.
● Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or
snapshots. Secure usage of Android Keystore and iOS Keychain.
● Mobile Design Components: Deliver new security design patterns and components
for Mobile security. Create reusable libraries for biometric login, secure storage, and
device attestation that feature teams can easily drop into their code.
● Pentesting: Regularly decompile and attack our own binaries to verify defenses.
Technical Requirements:
● Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.
● Experience with mobile security frameworks (OWASP MASVS).
● Hands-on experience with reverse engineering tools (Frida, Ghidra, MobSF).
● Understanding of Biometric authentication flows (FaceID/TouchID implementation).
Skills
- Kotlin
- Java
- Swift
- Android
- iOS
Never be applicant #200 again
Every job here is indexed straight from company career pages — often hours after it opens, before it reaches the big boards. Create a free account and get your best matches in a twice-daily digest.
- Your best matches, twice a day
- No duplicates, no ghost jobs, no recruiter spam
- Every job free to browse — pay only when you apply
Free account — no card required
93 622 live jobs · 17 847 companies tracked · 5 830 added today