20 ago
|
Socium - Teams Done Differently
|
Cequeliños
20 ago
Socium - Teams Done Differently
Cequeliños
Product Security Engineer — Mobile RASPThis is a Fully Remote role, but the individual needs to be based in Spain.Our client is a mobile identity and security company whose platform protects high-assurance apps from attack while they run — on devices the company doesn't control. They're hiring a hands-on Product Security Engineer to help build out their mobile application security (RASP) platform.This is a genuine builder role, not a policy or governance one. You'll write production code across mobile and backend, working at high velocity with AI as your primary development accelerator.What you'll be building:You'll ship the in-house shields that defeat rooting/jailbreaking, hooking and instrumentation, emulators, tampering and repackaging, malware, and network interception (MITM, SSL-pinning bypass, malicious VPN/proxy) — built on top of a licensed RASP core. You'll own the applied cryptography behind secure local storage and app/device attestation, plus the iOS symbol-obfuscation and binary-hardening tooling that closes native reverse-engineering gaps across Swift, C, C++ and Objective-C.The product spans both sides of the wire, so you'll also build and operate the platform's Python (Flask) backend — the APIs and services that ingest threat telemetry, drive the operator console, manage configuration and policy, and forward events to SIEM.Because you're building the product, you'll also run hands-on competitive evaluations (against the likes of Promon, Appdome, Guardsquare, Zimperium and Build38) and support the Sales & Solutioning team as a technical pre-sales engineer when needed.What we're looking for:Strong, current,
hands-on software engineering — you code daily and ship to productionMobile SDK development in iOS (Swift/Obj-C) and/or Android (Kotlin/Java), ideally security- or SDK-focusedExperience integrating and extending third-party SDKs via callback/event APIsCode-hardening experience — obfuscation and binary hardening across native mobile toolchainsApplied cryptography fundamentals (secure data-at-rest storage, attestation)Backend development in Python (Flask), with solid testing and API-design disciplineProven experience building and shipping quickly with AI coding tools (Claude Code, Copilot, Cursor, or similar)Practical CI/CD experience (GitHub Actions, GitLab CI or Jenkins) and solid AWS, Git and Docker fundamentalsFamiliarity with RASP/MTD, OWASP MASVS/MASTG, and the mobile attacker toolkit (Frida, Xposed, Magisk, emulators)Professional-standard EnglishStrongly preferred: Spanish (spoken and written), given the company's Spanish-speaking European and LATAM customer and supplier base. Experience or interest in fraud management (behavioural biometrics, transaction risk scoring, device intelligence) and EU regulatory frameworks (PSD2 SCA, DORA, GDPR, PCI-DSS, eIDAS 2.0) is a plus, as is a background in a security vendor or fintech/banking environment.Location: Fully remote, based in Spain or London.If you want to own real runtime security defences end-to-end — mobile client through to backend — and ship at speed with AI as your co-pilot, we'd love to hear from you. Company details shared on application.#ProductSecurity #MobileSecurity #RASP #Cybersecurity #Hiring #RemoteWork #iOS #Android #Python #AppSec
📌 Senior Product Security Engineer (Cequeliños)
🏢 Socium - Teams Done Differently
📍 Cequeliños