Senior Application Security Engineer (Mobile)

TL;DR

Senior Application Security Engineer (Mobile/API): Designing and implementing security controls for mobile and backend platforms with an accent on authentication mechanisms and runtime protections. Focus on identifying business logic vulnerabilities, conducting threat modeling, and embedding security into the development lifecycle.

Location: Hybrid (Greater London, UK)

Company

hirify.global is a professional recruitment and search firm specializing in technical talent acquisition.

What you will do

• Implement security controls for iOS and Android applications, focusing on authentication and secure data storage.
• Secure API interactions using OAuth and token-based authentication.
• Prevent abuse and apply rate limiting to mitigate business logic vulnerabilities.
• Conduct threat modeling and hands-on security reviews of mobile and backend systems.
• Collaborate with product managers and engineers to embed security into day-to-day development and the SDLC.

Requirements

• Proven experience as an Application Security Engineer, Product Security Engineer, or Mobile Engineer with a strong security focus.
• Deep understanding of mobile-to-API interaction patterns and common attack vectors in modern mobile apps.
• Ability to work hands-on and pragmatically with engineering teams.
• Location: Must be based in or able to work hybrid in Greater London, UK.

Nice to have

• Experience with React Native internals.