Embedded Mobile & Product Security Engineer

mrbeastyoutube; USA; Remote; USD 178.000 - 268.000; Vollzeit

Benefits dieser Stelle

Medical, dental & vision coverage

Life insurance

401(k) with safe harbor matching

Relocation assistance

Company-provided tech package

On-site collaboration with teams

Zusammenfassung

mrbeastyoutube is seeking a foundational mobile and product security engineer to own security across iOS, Android and web, embedded with product and mobile squads to build a zero-to-one security stack.

You will lead secure SDLC, code reviews of Swift, Kotlin and React Native, run offensive testing, and architect controls to satisfy partner security requirements, including AI-native features.

Qualifikationen

• Experience shipping security fixes inside consumer mobile apps.
• Deep experience securing native iOS and/or Android apps at consumer scale.
• Experience running or significantly contributing to an application security program inside a consumer product used by millions.
• Hands-on offensive security for mobile and web targets, including discovery and remediation of real-world on-device and API-level vulnerabilities.
• Familiarity with partner security frameworks (SOC 2, PCI) and vendor security reviews.
• Comfort operating in ambiguity on a fast-moving product, with a bias toward shipping controls over policy.

Aufgaben

• Embed with mobile and product squads to threat-model features, review designs, and harden code before it ships.
• Own the mobile application security program end-to-end, including secure mobile SDLC, code review across Swift, Kotlin, and React Native, supply-chain and dependency controls, and developer-facing security tooling.
• Run the broader product application security program, covering secure-by-default patterns, API and backend security review, and paved-road tooling for the engineering organization.
• Run the pen testing program, performing hands-on mobile and web offensive work and coordinating external engagements; turn findings into shipped fixes.
• Architect the controls and documentation needed to satisfy partner security requirements so partnership deals can close on schedule.
• Set the security baseline for an AI-native product stack, including coding agents, model and prompt security, mobile AI features, and related attack surfaces.
• Author mobile and product security standards, guardrails, and the paved-road playbook so that security scales with the organization.

Kenntnisse

Mobile security

Application security

Penetration testing

Threat modeling

Swift

Kotlin

React Native

Secure SDLC

Code review

API security

Jobbeschreibung

mrbeastyoutube is seeking a foundational mobile and product security engineer to own security across iOS, Android and web, embedded with product and mobile squads to build a zero-to-one security stack.

You will lead secure SDLC, code reviews of Swift, Kotlin and React Native, run offensive testing, and architect controls to satisfy partner security requirements, including AI-native features.