Android / iOS Developer

OTPless, Inc.; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

OTPless, Inc. in Bengaluru, India seeks a security-focused mobile engineer with 2–6 years of native mobile development experience on Android and/or iOS.

You will design and ship SDKs used by external partners, ensuring versioning, backward compatibility, and robust security controls such as root/jailbreak detection and code obfuscation. You will work across Kotlin/Java or Swift/Objective-C, debug on real devices, and contribute to RASP implementations and platform security primitives (Android

Qualifications

• 2-6 years hands-on native mobile development experience on Android and/or iOS, with depth on one platform and working knowledge of the other.
• Proven experience building and shipping SDKs consumed by external partners; understands versioning, backward compatibility, and public API design.
• Solid understanding of device security fundamentals: root/jailbreak detection, anti-tampering, and code obfuscation.
• Working knowledge of device fingerprinting techniques and privacy-conscious identity signal generation.
• Familiarity with RASP concepts and implementation: runtime integrity checks, hooking/injection detection.
• Strong grasp of platform security primitives: Android Keystore / Play Integrity API, iOS Keychain / Secure Enclave / App Attest.
• Comfort working across Kotlin/Java (Android) and/or Swift/Objective-C (iOS).
• Experience debugging across a wide range of real devices and OS versions, not just emulators.

Skills

Native mobile development

SDK development

App security

Device fingerprinting

RASP concepts

Platform security primitives

Kotlin/Java

Swift/Objective-C

Device debugging

Job description

Requirements:

• 2-6 years of hands-on native mobile development experience (Android and/or iOS); strong depth on one platform with working knowledge of the other is fine.
• Proven experience building and shipping SDKs (not just apps) consumed by external partners; you understand versioning, backward compatibility, and public API design.
• Solid understanding of device security fundamentals: root/jailbreak detection, anti-tampering, and code obfuscation.
• Working knowledge of device fingerprinting techniques and privacy-conscious identity signal generation.
• Familiarity with RASP concepts and implementation: runtime integrity checks, hooking/injection detection.
• Strong grasp of platform security primitives: Android Keystore / Play Integrity API, iOS Keychain / Secure Enclave / App Attest.
• Comfort working across Kotlin/Java (Android) and/or Swift/Objective-C (iOS).
• Experience debugging across a wide range of real devices and OS versions, not just emulators.

Good to Have:

• Experience with obfuscation/protection tooling (ProGuard/R8 DexGuard, iXGuard, or similar).
• Familiarity with the reverse-engineering tools attackers use (Frida, Xposed, Cydia Substrate, jadx, Hopper); understanding offence sharpens defence.
• Experience integrating with banking or fintech apps, or working under RBI/PCI-DSS-adjacent constraints.
• NDK/C++ experience on Android or low-level iOS security work.
• Experience with certificate pinning, mutual TLS, or other secure-transport hardening.
• Contribution to a published SDK/library with real external developer adoption.