App Hardening: Implement and maintain RASP (Runtime Application Self-Protection), Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms.
Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to prevent Man-in-the-Middle (MitM) attacks.
Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or snapshots. Secure usage of Android Keystore and iOS Keychain.
Mobile Design Components: Deliver new security design patterns and components for Mobile security. Create reusable libraries for biometric login, secure storage, and device attestation that feature teams can easily drop into their code.
Pentesting: Regularly decompile and attack our own binaries to verify defenses.
Technical Requirements
Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.