Senior Staff Security Engineer, Mobile Security (Digital Trust)

Company Introduction

Job Overview

We are looking for an Mobile Security Specialist to establish and lead mobile security across the company, covering consumer-facing applications as well as seller, rider and logistics mobile products.

This will initially be a highly hands-on senior IC role. The person will be expected to understand the mobile threat landscape, identify systemic risks, build scalable security processes, and influence senior engineering leaders to improve the security posture of mobile applications across multiple organizations.

Key Responsibilities

Mobile Threat Landscape and Strategy

• Build and maintain a comprehensive view of mobile threats, attack paths and systemic control gaps across the company's mobile estate.
• Define the target mobile security posture, priorities and longer-term roadmap.
• Track relevant changes in iOS, Android and mobile exploitation techniques and translate them into concrete security requirements.

Security Architecture and Standards

• Define practical security standards for iOS and Android, including application integrity, device trust, authentication, credential protection, local data, WebViews, deep links and third-party SDKs.
• Identify recurring weaknesses across applications and drive platform-level solutions rather than repeated app-specific fixes.
• Provide senior technical judgement on complex vulnerabilities, incidents and architectural decisions.

Security Assessment and Review Program

• Build a repeatable, evidence-based process for assessing mobile application security.
• Own and run the mobile security review program, including methodology, prioritization, acceptance criteria and escalation.
• Improve the program over time through automation, engineering self-service and better measurement of security coverage and residual risk.

Cross-Organization Influence

• Act as an agent of change for mobile security across engineering teams.
• Work directly with Senior Directors, Principal Engineers and senior mobile leaders to influence architecture, engineering practices and investment priorities.
• Drive security improvements across organizational boundaries without relying on formal authority.

Function Building and Leadership

• Start as a deeply hands-on technical leader, working directly with applications, code, devices and security controls where required.
• Establish the operating model for mobile security and identify where additional specialist capability is needed.
• Over time, help build and manage a small specialist mobile security team.

Qualifications

• Deep hands-on mobile security expertise across both iOS and Android, ideally developed in a large-scale consumer technology environment.
• Strong practical experience in areas such as mobile application security, reverse engineering, app integrity, device trust, authentication, secure storage, IPC, WebViews, deep links, networking and abuse resistance.
• Experience building or running a mobile security assessment or review program, rather than only performing individual reviews.
• Strong software engineering background, ideally including production mobile development or development of mobile security tooling.
• Demonstrated ability to identify systemic issues across multiple applications and translate them into reusable platform controls, standards or engineering frameworks.
• Proven experience influencing senior engineers and engineering leaders across organizational boundaries.
• Experience with product security architecture and threat modelling at significant scale.
• Evidence of driving changes in engineering practice, not only identifying security issues.
• Prior people management is useful but not required. Strong technical leadership and the ability to grow into man