- Kuala Lumpur Federal Territory Malaysia
Working Location
Job Description
Responsibilities
Client:Leading Bank
Level: Senior:
The Mission:
To harden the mobile application against tampering, reverse engineering, and malware. You ensure the "Bank in the Pocket" is running in a trusted environment.
Key Responsibilities:
App Hardening: Implement and maintain RASP (Runtime Application Self-Protection), Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms.
Secure Connectivity: Enforce Certificate Pinning and secure TLS configurations to prevent Man-in-the-Middle (MitM) attacks.
Data Protection: Ensure no sensitive data (PII, Keys) is leaked in logs, cache, or snapshots. Secure usage of Android Keystore and iOS Keychain.
Pentesting: Regularly decompile and attack our own binaries to verify defenses.
Technical Requirements:
Deep knowledge of Android (Kotlin/Java) and iOS (Swift/Obj-C) internals.
Experience with mobile security frameworks (OWASP MASVS).
Hands-on experience with reverse engineering tools (Frida, Ghidra, MobSF).
Understanding of Biometric authentication flows (FaceID/TouchID implementation).
Please Note we need 8+years of Experience
Benefits:
Work Location: Hybrid remote in Kuala Lumpur
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.