Mobile Security Technician (IoT/Fintech)

Location: Nairobi, Kenya; onsite

Company

hirify.global is an off-grid solar energy company combining solar product design, fintech, mobile devices, financing, and field operations to expand energy and digital access.

What you will do

• Conduct offensive security assessments of hardware, firmware, embedded operating systems, and payment stacks in mobile devices.
• Reverse engineer firmware and perform static and dynamic analysis to identify security weaknesses.
• Detect and exploit vulnerabilities in bootloaders, MDMs, Android kernel components, secure boot, cryptographic mechanisms, and embedded systems.
• Develop proof-of-concept attacks that demonstrate exploitability and business impact.
• Collaborate with product, hardware, and software engineering teams on secure development practices, threat modeling, and architecture reviews.
• Track emerging vulnerabilities, tools, and offensive research relevant to smartphone financing ecosystems.

Requirements

• Knowledge of Android security, Mobile Device Management, IoT architectures, and hardware security testing.
• Experience with JTAG, SWD, UART debugging, side-channel techniques, and fault injection.
• Experience using Flash 64, Pandora, Easy JTag, Chimera, CM2, Ghidra, IDA Pro, Binary Ninja, JTAGulator, OpenOCD, or Bus Pirate.
• Experience reviewing and modifying firmware images with tools such as binwalk, Firmadyne, and QEMU.
• Familiarity with secure boot, TPM/TEE, flash encryption, memory corruption, insecure update mechanisms, and other embedded security technologies.
• Programming and scripting skills in Python, C/C++, Bash, or similar languages, plus exposure to payment and fintech device security.

Culture & Benefits

• Professional growth in a rapidly expanding, high-social-impact industry.
• Open-minded and collaborative multicultural work environment.
• Structured learning and development programs through the Sun Center for Leadership.
• Commitment to diversity and inclusion across the workplace.