Mobile Security Engineer - Client-Side & Secure SDLC

Shopee; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

Shopee is seeking a security expert to perform mobile security assessments across Android, iOS, and Electron apps, validate AI-reported vulnerabilities, and push remediation through engineering teams. The role focuses on building a secure SDLC, implementing app hardening, anti-tampering, and secure data storage, while staying ahead of evolving security threats.

You will work with cross-disciplinary teams to design security solutions at architecture and system levels and maintain ongoing security

Qualifikationen

• Bachelor's degree in information security, computer science, or related field; minimum 3 years mobile security experience
• Familiarity with Android/iOS system architecture, sandboxing, permissions, code signing, Keychain, ATS
• Knowledge of mobile vulnerability types (WebView, insecure storage, cleartext transmission) and OWASP MASVS/MASTG
• Strong reverse engineering skills; experience with Jadx, IDA, Ghidra, Frida, Objection; ARM assembly familiarity
• Proficient in Java/Kotlin/Swift/Obj-C/C/C++; able to write automation tools in Python
• Experience in app hardening, obfuscation, security SDK development, or mobile SDLC; AI for security is a plus
• Excellent communication and cross-team collaboration; able to drive projects forward
• Hands-on AI for Security experience is a plus

Aufgaben

• Conduct security assessments and vulnerability research on client-side products (Android/iOS/Electron) and validate findings
• Build and operate secure SDLC for client-side apps, integrate security checks into CI/CD pipelines
• Develop core client-side protection capabilities: hardening, anti-tampering, anti-debugging, secure storage
• Design security solutions at platform and system level for different business lines and provide security support
• Keep up with offensive/defensive techniques and AI trends to continuously raise security posture

Kenntnisse

Mobile security

Reverse engineering

Python automation

Software security

AI for security

Communication

Ausbildung

Bachelor's degree in information security / CS

Tools

Jadx

IDA

Ghidra

Frida

Objection

Jobbeschreibung

Shopee is seeking a security expert to perform mobile security assessments across Android, iOS, and Electron apps, validate AI-reported vulnerabilities, and push remediation through engineering teams. The role focuses on building a secure SDLC, implementing app hardening, anti-tampering, and secure data storage, while staying ahead of evolving security threats.

You will work with cross-disciplinary teams to design security solutions at architecture and system levels and maintain ongoing security