Secure Mobile Systems Engineer

CypSec Group; Oregon (WI); On-site; USD 150,000 - 220,000; Full time

Benefits offered by this job

Performance-based pay

European benefits package

Relocation support

Access to security research facilities

Job summary

CypSec Group seeks a senior technical architect to lead secure mobile application development for European operations. The role requires expert knowledge in secure mobile architectures, cryptographic platforms, and defense‑oriented mobile systems.

You will design for GDPR/NIS2 compliance, implement hardware-backed security, and collaborate with cross‑functional teams to deliver hardened mobile apps for critical infrastructure.

Qualifications

• Design and deployment of mobile apps handling EU CLASSIFIED or NATO RESTRICTED information
• Development of mobile security frameworks with formal security verification and penetration testing
• Contributions to open‑source mobile security projects with enterprise/government adoption
• Participation in EU‑funded secure mobile research initiatives
• Documented vulnerability research in mobile platform security with coordinated disclosure

Responsibilities

• Architect secure mobile applications supporting European field operations and critical infrastructure mobile command systems
• Implement mobile security controls meeting EU classification and disconnected operations requirements
• Design mobile platforms capable of operating in zero-connectivity environments with multi-level security constraints
• Ensure operational compliance with GDPR Article 32, NIS2, and EU mobile security frameworks
• Develop mobile interface documentation for supervisory authority security review and cryptographic validation

Skills

React Native

Secure mobile architecture

Cryptographic platforms

Security verification & testing

GDPR & security compliance

Tools

React Native

Secure Element/TEE

TLS / Mutual TLS

OAuth 2.0 / OpenID Connect

RASP & anti-tampering

Job description

Position Authority

Vacancy issued under CypSec Group European secure mobile operations. This senior technical role demands demonstrated excellence in classified mobile application development beyond conventional commercial mobile engineering. Only candidates with exceptional achievements in secure mobile architecture, cryptographic mobile platforms, or defense community mobile systems will progress through our rigorous selection framework.

Tasks and Responsibilities

• Architect secure mobile applications supporting European field operations and critical infrastructure mobile command systems
• Implement mobile security controls meeting EU classified information handling and disconnected operations requirements
• Design mobile platforms capable of operating in zero-connectivity environments with multi-level security constraints
• Ensure operational compliance with GDPR Article 32, NIS2 Directive, and EU mobile security certification frameworks
• Develop mobile interface documentation suitable for supervisory authority security review and cryptographic validation proceedings

Mandatory Technical Excellence

• Expert‑level React Native with native module development for iOS/Android security integration
• Hardware‑backed keystore implementation, secure enclave utilization, and biometric authentication integration
• Local database encryption, secure data synchronization, and conflict resolution in disconnected environments
• Certificate pinning, mutual TLS, and OAuth 2.0/OpenID Connect implementation in mobile contexts
• App shielding, root/jailbreak detection, and runtime application self‑protection (RASP) deployment

Exceptional Candidate Requirements

• Design and deployment of mobile applications handling EU CLASSIFIED or NATO RESTRICTED information
• Development of mobile security frameworks with formal security verification and penetration testing certification
• Contributions to open‑source mobile security projects with demonstrated enterprise or government adoption
• Participation in EU‑funded secure mobile research initiatives (Horizon Europe, Digital Europe Programme, ENISA mobile security frameworks)
• Documented vulnerability research in mobile platform security with coordinated disclosure and remediation

Advanced Security Focus Areas

• Continuous device attestation and dynamic policy enforcement based on security posture
• Secure multi‑user data separation with cryptographic boundary enforcement
• Anti‑forensic design preventing data extraction from lost or compromised devices
• Mobile cryptography migration strategies for quantum‑resistant algorithms
• End‑to‑end encrypted messaging with perfect forward secrecy and deniability

Mobile Security Architecture Standards

• Trusted Execution Environment (TEE) and Secure Element integration for key storage
• SafetyNet Attestation API and DeviceCheck implementation for device integrity verification
• Control flow obfuscation, string encryption, and anti‑tampering mechanisms
• Timing attack resistance and power analysis mitigation in cryptographic operations
• Dependency verification and binary reproducibility for mobile application builds

Linguistic Proficiency Standards

• CEFR C1+ English capability for technical documentation and stakeholder communication
• CEFR C1+ working proficiency in German, Russian, Chinese, or Spanish
• Ability to produce specifications meeting government and regulatory review standards

Security Assessment Protocol

• Comprehensive background verification including employment history validation
• Enhanced screening procedures for access to sensitive technical information
• EU citizenship or permanent residency required for sensitive infrastructure access
• Willingness to undergo facility clearance processing where operational requirements dictate

Compensation Framework

• Performance‑based compensation exceeding standard market rates
• Comprehensive European benefits package including pension and professional development
• Relocation support for exceptional candidates requiring EU mobility
• Access to cutting‑edge security research infrastructure and academic partnerships

Selection Process

• Initial Assessment: Technical competency verification against mandatory requirements
• Deep Technical Review: In‑person architecture discussion and security methodology evaluation
• Operational Interview: Critical thinking under pressure and incident response scenarios