Job Title: Product Security Engineer/ Mobile application
Location: Plano Texas
Job Description:
In this role you will focus on identifying assessing and mitigating security risks across various platforms including APIs mobile applications (iOS and Android) wireless protocols and Linux systems.
The candidate will also be responsible for penetration testing proofofconcept exploits and reverse engineering software to uncover vulnerabilities and assess their potential impact. We are looking for candidates who are passionate about system security and have a broader and deeper understanding of the security landscape across software wireless networks and APIs. Due to the nature of this position candidates must work onsite at the Clients HQ in Plano TX. A hybrid model may be possible for strong candidates.
Summary:
This positions responsibility includes:
- Conduct analysis of security requirements specifications against implementation
- Perform security assessments and penetration testing including but not limited to mobile applications (iOS and Android) wireless security APIs and Linux OS
- Communicate complex technical findings and recommend the appropriate course of action and support the mitigation and revalidation efforts
- Develop skills through continuous learning and apply what you have learned relevant to emerging attack vectors vulnerabilities and exploits.
Qualification:
Required
- Bachelors degree (or higher) in Computer Engineering Computer Science Cybersecurity or related is strongly desired
- Handon experience with Linux Operating Systems and shell scripting
- Handson experience performing security assessment on OS or applicationlevel of iOS/Android applications
- Proficient in programming languages such as C/C Java Swift Kotlin and Python
- Knowledge of network security principles and various wireless security protocols
- Knowledge of APIs security and authentication protocols such as OAuth SAML etc.
- Handson experience on testing tools such as Burp Suite Frida dissemblers debuggers dynamic instrumentations and static code analysis
- Strong knowledge and understanding of X.509 SSL/TLS certificate and general certificate management process
- Deep understanding of API security best practices
- Strong interest to acquire and develop additional skills such as Embedded systems security fundamentals
Preferred
- Understanding of hardware principles with a focus on security aspects (e.g. Hardware Security Module Secure Boot)
- Strong background in security engineering various authentication and security protocols
- Strong understanding of Mobile OS security internals
- Deep experience in mobile security obfuscation techniques and reverse engineering
- Experience developing security testing framework and contributing to opensource projects
- Experience working with Software Define Radio and tools development
- Knowledge of Cloud platforms such as AWS GCP or Azure