SDK Engineer

Shortlist Design; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Shortlist Design is seeking an SDK Engineer to build native Android and iOS SDKs used by banks, fintech, and startup apps. You will own architecture, versioning, and backward compatibility across partner and OS versions.

You will optimize SDK size and latency, write integration docs and sample apps, implement robust security measures, and collaborate across Android and iOS platforms with CI/CD for SDK releases.

Responsibilities

• Build and maintain native Android (Kotlin/Java) and iOS (Swift/Objective-C) SDKs used by banks, fintech, and startup apps.
• Own SDK architecture, versioning, and backward compatibility across partner and OS versions.
• Optimize SDK size, cold-start latency, and memory footprint.
• Write integration docs, sample apps, and support tooling for partner teams.
• Build and harden root/jailbreak, emulator, debugger, and hooking-framework detection (Frida, Xposed, Cydia Substrate).
• Build device fingerprinting for fraud and risk signals.
• Implement RASP obfuscation, tamper detection, integrity checks, and anti-repackaging.
• Track emerging bypass techniques and patch proactively.
• Feed device signals into the fraud detection engine with security and ML.
• Work fluently across Android (Kotlin, NDK where relevant) and iOS (Swift, Objective-C).
• Integrate biometrics, Android Keystore, iOS Keychain/Secure Enclave, Play Integrity API, and App Attest.
• Define secure SDK-to-server protocols: token exchange, certificate pinning, and replay protection.
• Support partner integration, testing, and certification directly.
• Test across a wide matrix of real devices, OS versions, and manufacturers.
• Own crash-free rate, ANR rate, and SDK stability in production.
• Build and maintain CI/CD for SDK builds, testing, and staged rollouts.
• Provide L2/L3 support for partner integration issues.

Job description

The core responsibilities for the job include the following:

SDK Engineering:

• Build and maintain native Android (Kotlin/Java) and iOS (Swift/Objective-C) SDKs used by banks, fintech, and startup apps.
• Own SDK architecture, versioning, and backward compatibility across partner and OS versions.
• Optimize SDK size, cold-start latency, and memory footprint.
• Write integration docs, sample apps, and support tooling for partner teams.

Device Security and Anti-Fraud:

• Build and harden root/jailbreak, emulator, debugger, and hooking-framework detection (Frida, Xposed, Cydia Substrate).
• Build device fingerprinting for fraud and risk signals.
• Implement RASP obfuscation, tamper detection, integrity checks, and anti-repackaging.
• Track emerging bypass techniques and patch proactively.
• Feed device signals into the fraud detection engine with security and ML.

Platform and Ecosystem:

• Work fluently across Android (Kotlin, NDK where relevant) and iOS (Swift, Objective-C).
• Integrate biometrics, Android Keystore, iOS Keychain/Secure Enclave, Play Integrity API, and App Attest.
• Define secure SDK-to-server protocols: token exchange, certificate pinning, and replay protection.
• Support partner integration, testing, and certification directly.

Quality, Release, and Support:

• Test across a wide matrix of real devices, OS versions, and manufacturers.
• Own crash-free rate, ANR rate, and SDK stability in production.
• Build and maintain CI/CD for SDK builds, testing, and staged rollouts.
• Provide L2/L3 support for partner integration issues.