Product Security Engineer - Mobile at Sun King

Worldwide

<h1>Product Security Engineer - Mobile</h1><p><strong>Department: </strong>Global Analytics and Technology</p><p><strong>Employment Type: </strong>Permanent - Full Time</p><p><strong>Location: </strong>Global</p><p><strong>Reporting To: </strong>Head of Cyber Security</p><br/><h3>Description</h3> <strong>Job Location: </strong>Remote<strong><br/></strong><br/><strong>About the role:<br/></strong>We’re looking for a Security Engineer to join our Cyber Security Team, which investigates hacking attempts on Sun King devices and helps strengthen digital and financial inclusion for our customers.<br/><br/> As an ethical hacker, your mission is to identify security loopholes in vendor smartphones and advise on mitigation. You’ll test Sun King devices, especially mobile phones, for vulnerabilities, perform hardware reviews across mobile, IoT, and automotive devices, write custom Proof-of-Concept code, and conduct internal penetration testing.<br/><h3>What you would be expected to do:</h3><ul> <li>Perform offensive security assessments of hardware, firmware, embedded OS, and payment stacks. </li> <li>Reverse engineer firmware and conduct static/dynamic analysis to uncover flaws.</li> <li>Identify and exploit vulnerabilities in bootloaders, MDMs, Android kernels, secure boot, and cryptographic mechanisms.</li> <li>Build and execute PoC attacks to demonstrate exploitability and impact.</li> <li>Collaborate with engineering teams to define secure development practices.</li> <li>Participate in threat modeling and architecture reviews.</li> <li>Stay updated on emerging vulnerabilities, tools, and offensive research in smartphone financing ecosystems</li> </ul><br/><h3>You might be a strong candidate if you:</h3><ul> <li>Solid understanding of Android security, MDM, IoT architectures, and hardware testing/hacking. </li> <li>Experience with JTAG/SWD/UART debugging, side-channel analysis, and fault injection.</li> <li>Hands-on with Flash 64, Pandora, Easy JTag, Chimera, and CM2.</li> <li>Proficiency in Ghidra, IDA Pro, Binary Ninja, and debugging tools like JTAGulator, OpenOCD, and Bus Pirate.</li> <li>Experience with firmware analysis tools (Binwalk, Firmadyne, and QEMU).</li> <li>Familiarity with secure boot, TPM/TEE, flash encryption, and embedded security tech.</li> <li>Programming/scripting skills in Python, C/C++, and Bash.</li> <li>Understanding of vulnerabilities like memory corruption, logic flaws, and insecure updates.</li> <li>Exposure to payment/fintech device security and secure provisioning environments.</li> </ul><br/><h3>What Sun King offers:</h3><ul> <li>Professional growth in a dynamic, rapidly expanding, high-social-impact industry</li> <li>An open-minded, collaborative culture made up of enthusiastic colleagues who are driven by the challenge of innovation towards profound impact on people and the planet.</li> <li>A truly multicultural experience: you will have the chance to work with and learn from people from different geographies, nationalities, and backgrounds.</li> <li>Structured, tailored learning and development programs that help you become a better leader, manager, and professional through the Sun King Center for Leadership.</li> </ul>