Software Engineer (Android)

Thales; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Thales is seeking a Mobile Engineer (Android) to build IAM authentication apps and SDKs in Singapore. You will design secure authentication flows, own test strategies for SDKs, and ensure backward-compatible APIs while applying AI responsibly in a security-critical environment.

Join a small, high-impact team delivering secure solutions with a focus on AI-assisted delivery, privacy-conscious telemetry, and secure CI/CD workflows. The role offers a challenging, impact-driven engineering culture.

Qualifications

• Degree in Computer Engineering, Information Security, Electronics or related field.
• 5+ years of professional mobile development experience.
• Android (Java/Kotlin) expertise, including lifecycle, concurrency and memory management.
• AI-assisted development (e.g., Copilot/Claude/Cursor); able to prompt effectively and critically validate/rewrite output for security-sensitive code.
• Ability to apply AI across the SDLC (tests/docs/debug/review) with strong quality and security judgment.
• Experience building and distributing mobile SDKs (API design, versioning, binary distribution, backward compatibility).
• Familiar with mobile security practices/tools: static analysis, secure storage (Keychain/Keystore), certificate pinning and reverse-engineering countermeasures.
• Advantage: IAM and auth protocols (OAuth 2.0, OIDC, FIDO2, certificate-based authentication).
• Self-directed, collaborative engineer with strong trade-off judgment.

Responsibilities

• Design, build and validate mobile apps and SDKs; use AI-assisted tooling to accelerate delivery with mandatory human-led security review.
• Implement secure authentication and identity verification flows (protocol-driven); validate designs against platform threat models.
• Own test strategy for SDKs (unit/integration/UI); use AI to expand coverage while rigorously testing security-critical paths.
• Design clean, well-documented SDK APIs with backward compatibility and minimal binary-size impact.
• Improve the SDLC with pragmatic AI adoption (test generation, review support, debugging and release automation).
• Maintain CI/CD (e.g., Jenkins, GitLab CI) with SAST, dependency scanning and automated security checks; use AI to triage and accelerate remediation.
• Evaluate AI/ML tools and recommend adoption aligned to IAM security and data-handling standards; share best practices.
• Add privacy-conscious telemetry (crash/performance/diagnostics) to support customers without exposing sensitive identity data.
• Contribute to product innovation (prototypes/patents), including AI/ML opportunities that improve security and reduce user friction.

Skills

Mobile development

Android Development

AI-assisted development

AI in SDLC

SDK development

Static analysis

Secure storage

Certificate pinning

Reverse engineering countermeasures

IAM protocols

Self-directed

Team collaboration

CI/CD tooling

Education

Degree in Computer Engineering

Degree in Information Security

Degree in Electronics

Tools

Jenkins

GitLab CI

Job description

Location: Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Thales CDI (Cyber-Security Products) is hiring a Mobile Engineer (Android) to build IAM (Identity & Access Management) mobile apps and SDKs. You will help deliver secure, easy-to-integrate authentication experiences where security is non‑negotiable.

You will work in a small, high-impact team and use AI responsibly to accelerate delivery—while applying strong engineering judgment and human-led security review in a security‑critical environment.

Responsibilities

• Design, build and validate mobile apps and SDKs; use AI-assisted tooling to accelerate delivery with mandatory human-led security review.
• Implement secure authentication and identity verification flows (protocol-driven); validate designs against platform threat models.
• Own test strategy for SDKs (unit/integration/UI); use AI to expand coverage while rigorously testing security-critical paths.
• Design clean, well-documented SDK APIs with backward compatibility and minimal binary-size impact.
• Improve the SDLC with pragmatic AI adoption (test generation, review support, debugging and release automation).
• Maintain CI/CD (e.g., Jenkins, GitLab CI) with SAST, dependency scanning and automated security checks; use AI to triage and accelerate remediation.
• Evaluate AI/ML tools and recommend adoption aligned to IAM security and data-handling standards; share best practices.
• Add privacy-conscious telemetry (crash/performance/diagnostics) to support customers without exposing sensitive identity data.
• Contribute to product innovation (prototypes/patents), including AI/ML opportunities that improve security and reduce user friction.

Requirements

• Degree in Computer Engineering, Information Security, Electronics or related field.
• 5+ years of professional mobile development experience.
• Android (Java/Kotlin) expertise, including lifecycle, concurrency and memory management.
• AI-assisted development (e.g., Copilot/Claude/Cursor); able to prompt effectively and critically validate/rewrite output for security-sensitive code.
• Ability to apply AI across the SDLC (tests/docs/debug/review) with strong quality and security judgment.
• Experience building and distributing mobile SDKs (API design, versioning, binary distribution, backward compatibility).
• Familiar with mobile security practices/tools: static analysis, secure storage (Keychain/Keystore), certificate pinning and reverse-engineering countermeasures.
• Advantage: IAM and auth protocols (OAuth 2.0, OIDC, FIDO2, certificate-based authentication).
• Self-directed, collaborative engineer with strong trade-off judgment.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.