AI Phone - Security & Privacy Engineer

Location: United Kingdom; hybrid workplace

Company

hirify.global is building proactive AI-native applications and devices that bring intelligence into everyday conversations, coordination, and workflows.

What you will do

• Design the security and privacy architecture for an AI-native phone.
• Define permission models, access boundaries, authentication, authorization, and access controls for AI agents, tools, and application integrations.
• Secure AI access to messages, contacts, calendars, notifications, camera, microphone, location, and other sensitive information through sandboxing and isolation.
• Implement audit logging, user-visible activity tracking, secure storage, encryption, data retention, and deletion mechanisms.
• Identify and mitigate AI-specific risks including prompt injection, malicious applications, data exfiltration, and unauthorized tool execution.
• Review Android/AOSP permission models, privileged system access, SELinux policies, and system-level security boundaries; conduct security assessments, threat modeling, and penetration testing.

Requirements

• Strong experience in mobile security, Android security, application security, or systems security.
• Deep understanding of Android security architecture, including application sandboxing, permissions, SELinux, Binder IPC, and privileged system services.
• Experience designing authentication, authorization, and access-control systems.
• Strong understanding of encryption, secure storage, key management, and data protection.
• Experience with security threat modeling, vulnerability assessment, and penetration testing.
• Understanding of privacy-by-design principles, data minimization, and user consent.
• Ability to work across Android platform, backend, and AI agent architectures.

Nice to have

• Experience with AOSP security customization or Android platform security.
• Experience securing system-level applications or privileged Android services.
• Experience with AI agent security, prompt injection, tool-use security, or LLM data leakage.
• Experience with mobile device security, Trusted Execution Environment, hardware-backed keystores, or secure boot.
• Experience with privacy engineering for products handling sensitive personal information.
• Experience building permission and approval systems for autonomous agents.

Culture & Benefits

• Full-time employment in a hybrid workplace in the United Kingdom.
• Cross-functional collaboration with Android/AOSP, Agent Runtime, Context & Memory, and Applied ML teams.
• Security is expected to be built into the architecture rather than added later.