Senior Mobile Security Engineer (Android/iOS)

About the role

Encora is hiring a Senior Mobile Security Engineer in Kuala Lumpur to strengthen mobile app security across Android and iOS. The role covers hardening existing apps, building reusable security components and regularly testing the company's own binaries.

Key responsibilities

• App hardening: implement and maintain RASP (Runtime Application Self-Protection), code obfuscation (ProGuard/DexGuard) and root/jailbreak detection.
• Secure connectivity: enforce certificate pinning and secure TLS configurations to prevent man-in-the-middle attacks.
• Data protection: ensure no sensitive data (PII, keys) leaks in logs, cache or snapshots, and use Android Keystore and iOS Keychain securely.
• Mobile design components: deliver new security patterns and reusable libraries for biometric login, secure storage and device attestation.
• Pentesting: regularly decompile and attack the company's own binaries to verify defenses.

Required profile

• Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.
• Experience with mobile security frameworks such as OWASP MASVS.
• Understanding of biometric authentication flows (FaceID/TouchID).

Required skills

• Hands-on experience with reverse engineering tools such as Frida, Ghidra and MobSF.
• Knowledge of Android and iOS internals and mobile security frameworks.