Senior Android Platform Security Engineer

Quest Global; Bengaluru; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Quest Global in Bengaluru is seeking a Senior Software Engineer for the Android Platform Security team. You will architect, design, and validate hardware-backed security modules that protect billions of Android devices, spanning Java APIs, Rust/C++, Trusty OS, and Secure Elements.

You will lead complex features like key management, attestation, and RKP, while driving CTS and VTS compliance across SoCs and OEMs.

Qualifications

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.
• 7+ years of hands-on software engineering experience in embedded systems, OS internals, or mobile platform security.
• Proficiency in C++, Rust, and Java (JavaCard for Secure Element applets when applicable).
• Deep Android security experience with Keystore, KeyMint/Keymaster, Trusty OS, and Secure Elements.
• Experience integrating Android HALs with AIDL/Binder IPC and cryptography concepts.

Responsibilities

• Architect, develop, and maintain core Android security components such as Keystore, KeyMint, Trusty OS TA, and Secure Elements.
• Define and evolve AIDL-based HALs and Binder IPC interfaces between Android OS and hardware.
• Implement cryptographic protocols, hardware-backed key generation, and attestation.
• Develop and debug CTS/VTS tests to ensure security compliance across vendors.
• Triage and resolve functional, performance, and security issues across Java, C++, Rust, TEEs, and SEs.
• Provide technical leadership, code reviews, and threat modeling for secure design.

Skills

Embedded systems

OS internals

Security best practices

Code reviews

Education

Bachelor's or Master's in CS/CE/EE

Tools

AIDL

Binder IPC

KeyStore/KeyMint

Trusted Execution Environments

Job description

Job Requirements

At Quest Global, it's not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

Job Requirements

At Quest Global, it's not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

About The Job

As a Senior Software Engineer on the Android Platform Security team, you will architect, design, develop, and validate critical hardware-backed security modules that protect billions of Android devices worldwide. You will work across the entire Android security stack—from Java framework APIs and Rust/C++ system daemons (keystore2) down to AIDL Hardware Abstraction Layers (HALs), Trusted Execution Environments (Trusty OS), and Secure Elements (JavaCard / StrongBox). In this role, you will lead complex features involving cryptographic key management, hardware attestation, Remote Key Provisioning (RKP), and compliance verification through CTS and VTS suites.

Key Responsibilities

• Design & Development: Architect, develop, and maintain core Android security components including Android Keystore, KeyMint (and StrongBox KeyMint), Trusty OS Trusted Applications (TAs), and JavaCard applets for Secure Elements (eSE).
• HAL & IPC Integration: Define, implement, and evolve AIDL-based HALs and Binder IPC interfaces connecting the Android OS framework with underlying TEE and Secure Element hardware.
• Cryptography & PKI: Implement and review cryptographic protocols, hardware-backed key generation, key attestation, X.509 certificate chain validation, and secure storage mechanisms.
• Testing & Compliance: Author, maintain, and debug CTS (Compatibility Test Suite) and VTS (Vendor Test Suite) tests to ensure ecosystem-wide security compliance and robustness across SoC vendors and OEMs.
• Cross-Stack Debugging: Triage, root-cause, and resolve complex functional, performance, and security issues spanning Java framework services, native C++/Rust system daemons, kernel drivers, TEEs, and Secure Elements.
• Technical Leadership: Provide technical mentorship, drive security design reviews, Threat Modeling, and code reviews in C++, Rust, and Java, ensuring adherence to memory safety and secure coding best practices.

Minimum Qualifications

• Education: Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.
• Experience: 7+ years of hands-on software engineering experience in embedded systems, OS internals, or mobile platform security.
• Programming Languages: Strong proficiency in C++, Rust, and Java (including JavaCard for Secure Element applet development where applicable).
• Android Security Core: Deep hands-on experience with Android Keystore, KeyMint (or Keymaster), Trusty OS (or equivalent TEEs like OP-TEE/QTEE), and Secure Elements (eSE / StrongBox).
• Interfaces: Proven experience developing and integrating Android HALs using AIDL (and HIDL) and Binder IPC.
• Cryptography: Solid foundation in applied cryptography (AES, RSA, ECC/ECDSA/ECDH, SHA/HMAC, KDFs), PKI, X.509 certificates, and hardware key attestation.
• Validation: Hands-on experience developing, executing, and debugging Android CTS and VTS test suites.

Preferred Qualifications

• Experience with Rust in AOSP (e.g., keystore2, KeyMint Rust reference implementation, or Trusty Rust TAs).
• Experience with JavaCard applet development, GlobalPlatform specifications, APDU command protocols, and OMAPI.
• Knowledge of Remote Key Provisioning (RKP), CBOR/COSE data structures, DICE (Device Identifier Composition Engine), or Android Virtualization Framework (AVF / pKVM).
• Familiarity with side-channel mitigation, fuzz testing (libFuzzer), static/dynamic analysis tools, and hardware security certification standards.
• Track record of contributing to the Android Open Source Project (AOSP) and collaborating with SoC vendors, OEMs, or Secure Element vendors.

We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.

We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.