Android SDK Engineer

Shortlist Design; Bengaluru; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Shortlist Design in Bengaluru is seeking a hands-on native mobile developer who can build and ship SDKs for Android and iOS, owning security-focused features and compatibility across partner apps.

You should have 2–6 years of native mobile experience, deep knowledge of device security, obfuscation, and tamper detection, plus familiarity with Frida and Xposed. Proficiency in Kotlin/Java and Swift/Objective-C is required.

Qualifications

• 2–6 years of hands-on native mobile development experience (Android and/or iOS).
• Proven experience shipping SDKs consumed by external partners with attention to versioning and backward compatibility.
• Solid understanding of device security fundamentals including tamper detection, obfuscation, and privacy-conscious identity signals.

Skills

Native mobile development

SDK development

Android & iOS proficiency

Tools

Frida

Xposed

Job description

About us - We are a hiring product that helps brands hire Design & Tech Talents faster, we work with top brands across India and off-shore hire talents as quickly as possible. (Just consider us like a bridge connecting talents with right opportunity)

Company: This is for a funded tech company based in Bangalore, which is also making strong revenue.

• Build and maintain native Android (Kotlin/Java) and iOS (Swift/Objective-C) SDKs used by bank, fintech, and startup apps. Own SDK architecture, versioning, and backward compa?bility across partner and OS versions
• Optimise SDK size, cold-start latency, and memory footprint. Write integration docs, sample apps, and support tooling for partner teams

Device Security & Anti-Fraud

Build using root/jailbreak, emulator, debugger, and hooking-framework detection (Frida, Xposed, CydiaSubstrate). Build device fingerprinting for fraud and risk signals

• Implement RASP — obfuscation, tamper detection, integrity checks, anti-repackaging. Track emerging bypass techniques and patch proactively
• Feed device signals into the fraud detection engine with Security and ML

Platform & Ecosystem

• Work fluently across Android (Kotlin, NDK where relevant) and iOS (Swift, Objective-C). Integrate biometrics, Android Keystore, iOS Keychain/Secure Enclave, Play Integrity API, App Attest
• Define secure SDK-to-server protocols — token exchange, certificate pinning, replay protection. Support partner integration, testing, and certification directly

Quality, Release & Support

• Test across a wide matrix of real devices, OS versions, and manufacturers. Own crash-free rate, ANR rate, and SDK stability in production
• Build and maintain CI/CD for SDK builds, testng, and staged rollouts. Provide L2/L3 support for partner integration issues

What We’re Looking For

Must-Have

• 2–6 years of hands-on native mobile development experience (Android and/or iOS); strong depth on one platform with working knowledge of the other is fine. Proven experience building and shipping SDKs (not just apps) consumed by external partners — you understand versioning, backward compatibility, and public API design
• Solid understanding of device security fundamentals — root/jailbreak detection, anti-tampering, code obfuscation. Working knowledge of device fingerprintng techniques and privacy-conscious identity signal generation
• Familiarity with RASP concepts and implementation — runtime integrity checks, hooking/injection detection. Strong grasp of platform security primitves — Android Keystore / Play Integrity API, iOS Keychain / Secure Enclave / App attest.
• Comfort working across Kotlin/Java (Android) and/or Swib/Objective-C (iOS). Experience debugging across a wide range of real devices and OS versions, not just emulators