Skip to content

Senior Mobile Security Engineer (Android/iOS)

Encora · Kuala Lumpur

Posted

About the role

Senior Mobile Security Engineer (Android/iOS) at Encora in Kuala Lumpur. Posted June 22, 2026.

Key Responsibilities: 
● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection), 
Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms. 
● Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to 
prevent Man-in-the-Middle (MitM) attacks. 
● Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or 
snapshots. Secure usage of Android Keystore and iOS Keychain. 
● Mobile Design Components: Deliver new security design patterns and components 
for Mobile security. Create reusable libraries for biometric login, secure storage, and 
device attestation that feature teams can easily drop into their code. 
● Pentesting: Regularly decompile and attack our own binaries to verify defenses. 

Technical Requirements: 
● Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals. 
● Experience with mobile security frameworks (OWASP MASVS). 
● Hands-on experience with reverse engineering tools (Frida, Ghidra, MobSF). 
● Understanding of Biometric authentication flows (FaceID/TouchID implementation). 

Prefer to apply yourself? Apply on Encora’s site

Quick answers

Where is this job based?

Kuala Lumpur.

How do you apply?

Apply on Encora’s site using the link on this page. With a free Jobmagic account you can see how well you fit first.

Similar jobs

All open jobs at EncoraAll Security Engineer jobs