CrawlJobs Logo

Mobile Application Security Engineer

boozallen.com Logo

Booz Allen Hamilton

Location Icon

Location:
United States , Fort Meade

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

69400.00 - 158000.00 USD / Year

Job Description:

Build your problem-solving prowess in a rapidly evolving systems security research and engineering environment. Use skills in mobile operating system security, mobile application pen testing, and networking protocols to support our government clients. Have a direct impact on the nation’s security. Be involved in the full life cycle of mobile application security and solution design.

Job Responsibility:

  • Perform reverse engineering and vulnerability analysis of various software problems
  • Inform operational parameters for complex systems
  • Leverage automation and machine learning to influence the delivery of your work
  • Support government clients in mobile application security

Requirements:

  • 2+ years of experience with iOS and Android mobile device operating systems
  • Knowledge of static and dynamic mobile app security analysis concepts
  • Knowledge of protocol and network analysis using mitmproxy and Wireshark
  • Knowledge of common mobile application vulnerabilities and mobile threats
  • Secret clearance
  • Bachelor's degree

Nice to have:

  • Experience developing iOS and Android mobile applications
  • Knowledge of common mobile application authentication and encryption methods, including OAuth and PKI
  • Knowledge of reverse engineering Android DEX files and Apple’s Mach-O files
  • Knowledge of OWASP Mobile Top 10 and the Mobile Security Testing Guide (MSTG)
  • Possession of excellent verbal and written communication skills
  • Security+, Certified Ethical Hacker (CEH), SANS Mobile Device Security, or Ethical Hacking Certification
What we offer:
  • Health, life, disability, financial, and retirement benefits
  • Paid leave
  • Professional development
  • Tuition assistance
  • Work-life programs
  • Dependent care
  • Recognition awards program

Additional Information:

Job Posted:
March 19, 2026

Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Mobile Application Security Engineer

Security Engineer, Application Security

Figure is an AI Robotics company developing a general purpose humanoid. Our huma...
Location
Location
United States , San Jose
Salary
Salary:
150000.00 - 350000.00 USD / Year
figure.ai Logo
Figure
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Experience in several of the following application security domains: penetration testing, vulnerability research, security assessment, secure coding practices, security architecture & design, hardware security
  • Strong software engineering (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar
  • Experience with securing embedded systems, including secure boot, secure identity, OTA, or others
  • Solid foundation in web security, mobile security, or cryptography
  • Ability to collaborate with internal and external stakeholders whilst prioritizing tasks and work independently under minimal supervision.
  • BS in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
  • 3+ years of experience in the field of application security or related security role
  • Passion for learning and helping others
  • Excellent verbal and written communication skills, with high attention to detail
Job Responsibility
Job Responsibility
  • Conduct security assessments of applications, embedded systems, back-end services, and business integrations, as well as build tooling for a secure development lifecycle
  • Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them.
  • Build frameworks and systems to prevent classes of vulnerabilities
  • Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems)
  • Be a champion for security and user privacy
  • Fulltime
Read More
Arrow Right

Application Security Engineer

We are expanding our team to include a Security Engineer to be 100% focused on o...
Location
Location
United States
Salary
Salary:
175000.00 USD / Year
corporatetools.com Logo
Corporate Tools
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Solid fundamentals in webapp and network pentesting (2+ years)
  • 4+ years of professional experience in Ruby on Rails or equivalent and Vue or a Frontend equivalent framework
  • Experience with Linux and cloud environment testing
  • Understanding of security issues for desktop, virtual, cloud services and network infrastructures
  • Working knowledge of information systems security standards/practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling)
  • Experience with secure network protocols and encryption of communications between networked hosts
  • Experience in IT systems and security policies, standards, industry trends, and techniques
  • Experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and/or verification of new APT TTPs
  • Fundamental understanding of security knowledge of testing mobile, native applications, web applications, distributed and database systems
  • Must be detail-oriented and possess strong problem-solving skills and ability to analyze for potential future issues
Job Responsibility
Job Responsibility
  • Understand and safely use various open source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures
  • Create security vulnerability reports for both technical and executive audiences
  • While in-between assessments, you will be expected to help our security engineers think through solutions to problems you find
  • Automate tasks and script at a basic level to enhance penetration testing processes
  • Passion for learning new technologies and processes, and contributing to refining existing capabilities
  • Communicate with stakeholders (technical and non-technical), both verbal and written
  • Stay up to date on 0 day exploits for tech stacks we use
What we offer
What we offer
  • 100% employer-paid medical, dental and vision for employees
  • Annual review with raise option
  • 22 days Paid Time Off accrued annually, and 4 holidays
  • After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
  • Paid Parental Leave
  • Up to 6% company matching 401(k) with no vesting period
  • Quarterly allowance
  • Open concept office with friendly coworkers
  • Creative environment where you can make a difference
  • Trail Mix Bar
  • Fulltime
Read More
Arrow Right

Digital Web & Mobile Security Senior Analyst

The Digital Web & Mobile Security Senior Analyst is an intermediate level positi...
Location
Location
India , Chennai; Pune
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience as application security consultant / security expert
  • SME level knowledge of web application vulnerabilities and web application business logic flaws and threats
  • In depth and hands-on understanding and application architectures and technology (including web applications, mobile technology, web 2.0 technology, identity and access management)
  • Demonstrable experience with mobile application security, HTML5, Web Services/API assessment, identity management will be highly regarded
  • Thorough understanding of industry and corporate technology standards for Information Security
  • Expert in latest Internet and Mobile technology with strong architectural and design knowledge
  • Detailed familiarity with security hacking tools and techniques
  • Excellent written and oral English communication skills
Job Responsibility
Job Responsibility
  • Prevent and drive to clear the outstanding safety and soundness items by assessing and predicting the potential risk items before it becomes an issue / escalation
  • Assess priorities across multiple safety and soundness items and drive those critical ones similar like driving high priority production items and never settle until it is closed
  • Drive our outstanding safety and soundness items across all teams to closure and turn it around to become prevention instead of reacting to issues
  • Operate independently including the ability to provide executive summary for safety and soundness issues for executive consumption without a need for a continuous review
  • Review existing security architectures, identify design gaps, and recommend security enhancements
  • Act as an advocate for the application security architecture. Communicates and educates on the IS Architecture and roadmap
  • Develop security design pattern by identifying broader and emerging IS issues
  • Provides architecture consulting across the bank to project teams and other architects
  • Prioritize architecture deliverables, and establish short-term, mid-term and long-range architecture plans. Facilitates the migration to the reference architecture in a way that enables and supports the strategic plan
  • Maintains understanding of business issues, operating procedures and priorities
  • Fulltime
Read More
Arrow Right

Security Engineer

Airspace Link is seeking a Security Engineer to support the security posture of ...
Location
Location
United States , Detroit
Salary
Salary:
Not provided
airspacelink.com Logo
Airspace Link
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 2–5 years of experience in security engineering, cloud security, SOC/IR operations, or related hands-on security roles
  • Working knowledge of Azure security concepts and Microsoft cloud security tools
  • Practical experience with: Microsoft Defender for Cloud, Endpoint, Identity, and Cloud Apps
  • Microsoft Sentinel (KQL querying, incident investigation, dashboards)
  • Microsoft Intune / Endpoint Manager (MDM/MAM)
  • Microsoft Purview (DLP and compliance tooling)
  • Hands-on experience supporting vulnerability remediation with engineering teams
  • Familiarity with Terraform, secure CI/CD practices, and cloud configuration management
  • Strong written and verbal communication skills with the ability to collaborate cross-functionally
Job Responsibility
Job Responsibility
  • Assist with implementing and maintaining security controls within Azure and SaaS environments
  • Support the incident response lifecycle, including initial investigation, coordination with engineering, and documentation of remediation actions
  • Monitor, tune, and assist in the operation of the Microsoft Defender suite (Defender for Cloud, Endpoint, Identity, Cloud Apps, and Vulnerability Management)
  • Support mobile device management (MDM) and endpoint compliance using Microsoft Intune and Endpoint Manager
  • Partner with engineering teams to identify, prioritize, and track remediation of vulnerabilities across applications, cloud infrastructure, and CI/CD pipelines
  • Help implement and maintain Entra ID Conditional Access and Privileged Identity Management (PIM)
  • Assist in integrating DevSecOps guardrails within Azure DevOps and GitHub pipelines (e.g., CodeQL, IaC scanning, secret governance)
  • Participate in developing dashboards and analytics in Microsoft Sentinel, including KQL queries and incident correlation support
  • Contribute to threat modeling and risk assessments as part of project reviews
  • Support the creation and upkeep of security configuration baselines, Terraform modules, and policy templates
  • Fulltime
Read More
Arrow Right

Network and Security Engineer

We are seeking a talented and experienced Network and Security Engineer to join ...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
awtg.co.uk Logo
AWTG
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in computer science, Information Security, or a related field (or equivalent work experience)
  • Proven experience as a Network and Security Engineer or similar role, with focus on IP network design, implementation, T-shoot and mobile network security
  • Understanding of 3GPP mobile network CORE and RAN architectures and security requirements
  • Strong knowledge of network security protocols, VPN, firewall management, and intrusion detection systems
  • Experience with security tools such as SIEM, IDS/IPS, and vulnerability scanners
  • Familiarity with regulatory standards and frameworks (e.g., GDPR, HIPAA, ISO 27001)
  • In-depth understanding of routers, switches, firewalls, and switching/routing protocols – such as VLAN, VTP, STP, RSTP, MST, OSPF, EIGRP and BGP
  • Monitoring solutions which include PRTG, SolarWinds and Zabbix, and also, knowledge of Virtualization technology such as EXSi, KVM, Proxmox and Hyper-V
  • Excellent analytical and problem-solving skills with the ability to troubleshoot complex issues
  • Strong communication skills and the ability to work effectively in a team environment
Job Responsibility
Job Responsibility
  • Design, configure and implement highly scalable L2/L3 networks using varieties of protocols and vendor equipment
  • Monitor network traffic and analyse security incidents to detect and respond to threats within mobile network environments
  • Diagnose and troubleshoot network related issues associated with L1-L7 using varieties of tools, ensuring quick recovery and minimum network downtime
  • Carry out periodic backups of network device operating system and configurations to ensure timely restoration of critical network services
  • Design and implement network security solutions such as Policies, IPS, SSLVPN, IPSec VPN and security profiles using Next-Gen Firewalls (FortiGate/Palo-Alto)
  • Develop and apply network segmentation strategies to strengthen security and safeguard sensitive information within the core network
  • Work closely with other teams to establish and enforce network access policies, ensuring that only authorized individuals and devices have the correct access privileges
  • Conduct vulnerability assessments and penetration testing to identify and address security weaknesses in mobile network architectures
  • Develop and enforce security policies and procedures to ensure compliance with industry standards and regulations
  • Design and implement security protocols and solutions to protect network infrastructure
  • Fulltime
Read More
Arrow Right

Staff Software Engineer - Mobile

Easygo leads the world in crafting top-tier entertainment experiences. Within ou...
Location
Location
Australia , Melbourne
Salary
Salary:
Not provided
easygo.io Logo
Easygo Gaming
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 8+ years of mobile application development experience
  • Proven success designing and delivering complex, high-performance mobile applications — ideally in gaming, entertainment, or real-time interactive environments
  • Strong command of mobile frameworks and ecosystems such as Native (Swift/Kotlin) and Cross-platform (React Native, Flutter)
  • In-depth knowledge of rendering, audio, device integration, performance tuning, and security on mobile platforms
  • Demonstrated ability to lead architectural direction and technical decision-making at a senior level
  • Strong communication and collaboration skills, with experience partnering with cross-functional teams and influencing technical outcomes
Job Responsibility
Job Responsibility
  • Define the mobile technology strategy for our core gaming platform across iOS and Android, aligning architecture with business goals and user expectations
  • Architect secure, performant, and scalable mobile systems optimised for real-time gaming, immersive interaction, and cross-platform compatibility
  • Establish and uphold mobile engineering standards, including development practices, testing frameworks, deployment workflows, and code quality benchmarks
  • Partner cross-functionally with product managers, designers, and platform engineers to ensure seamless mobile-user experiences that enhance gameplay
  • Act as a technical leader and subject matter expert, guiding architectural decisions, reviewing designs, and influencing mobile development across the company
  • Support team growth by defining hiring criteria, participating in recruitment, and mentoring engineers to build a high-performing mobile team
Read More
Arrow Right

Engineering Team Lead – Core

Hewlett Packard Enterprise is seeking an Engineering Team Lead – Core to integra...
Location
Location
Israel , Tel Aviv
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years in software engineering or application security, with at least 2 years in a leadership or team lead capacity
  • strong hands-on experience in one or more languages: C#, TypeScript/JavaScript, Python, or Go
  • proven experience designing and building secure backend, frontend, and/or mobile applications
  • solid understanding and practical experience implementing secure communication and identity protocols (OAuth2, OIDC, TLS, JWT)
  • familiarity with modern secure design patterns and best practices across microservices, APIs, and cloud-native systems
  • experience building or securing applications in AWS, Azure, or GCP environments
  • ability to identify security flaws through code and design review and offer actionable recommendations
Job Responsibility
Job Responsibility
  • lead the integration of security principles into all stages of the software development lifecycle (SDLC), from design to delivery
  • define and drive a roadmap that ensures applications are secure by design, working closely with engineering leaders to embed best practices
  • guide implementation of secure protocols like OAuth2, OIDC, TLS, and JWT, ensuring robust authentication, authorization, and data integrity
  • promote and apply secure design principles (e.g., least privilege, fail-safe defaults, defense in depth) across services, APIs, and architectures
  • coach developers on secure development practices, lead internal training, secure code reviews, and design sessions
  • partner with product, engineering, DevOps, and architecture teams to align security goals with product priorities and delivery timelines
  • lead the selection and adoption of development-facing security tools (e.g., static analyzers, secret scanners), balancing security outcomes with developer experience
What we offer
What we offer
  • health and wellbeing packages
  • personal and professional development programs
  • unconditional inclusion focused on embracing diversity and flexibility
  • comprehensive suite of benefits for physical, financial, and emotional wellbeing
  • Fulltime
Read More
Arrow Right

Senior Security Engineer

Senior Security Engineer – Remote (US) – Competitive Salary Opportunity to work ...
Location
Location
United States
Salary
Salary:
Not provided
weareorbis.com Logo
Orbis Consultants
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related technical field
  • 5+ years of hands-on experience in security engineering or related roles
  • Expertise in secure software development, architecture design, threat modeling, CI/CD pipelines, and risk assessment
  • Deep knowledge of network, system, database, and application layer attack patterns and mitigation methods
  • Ability to clearly communicate complex concepts appropriately to multiple audience types
  • Coding skills necessary to discover and patch issues Node, TypeScript/React, Python
  • Solid understanding and experience with AWS, Heroku, Netlify, and Snowflake, including policy, configurations, and security management tooling
  • Proven track record with SOC 2, PCI DSS, or similar compliance frameworks and reporting
  • Experience working in startup or high-growth environments, fintech, and/or highly regulated industries preferred
  • Cloud security certifications with evidence of continued education in the area of security are a plus
Job Responsibility
Job Responsibility
  • Vulnerability Management: Conduct regular vulnerability assessments, penetration testing, and security audits to identify and remediate security gaps across our cloud infrastructure and applications
  • Security Monitoring: Monitor systems for security threats, suspicious behavior, and anomalies using SIEM tools and security monitoring and vulnerability platforms like CrowdStrike and Nessus
  • Incident Response: Lead security incident response efforts, investigate suspicious reports, and implement preventative measures that may be warranted
  • Code Security Reviews: Review and approve code (Node, React, Python) that accesses to data, authentication, or integrations, ensuring secure development practices are followed
  • Cross-functional Collaboration: Work closely with engineering and operations teams, including executive stakeholders and occasionally third-party service providers, to integrate security best practices into development and deployment processes
  • Architecture Review: Evaluate and provide security recommendations for system architecture changes (e.g. network segmentation, microservices, virtual environments, data warehousing, etc) and new feature implementations, including the evaluation of AI enablement opportunities
  • Cloud Security: Secure cloud deployments (AWS/Heroku/Netlify), including configuration of firewalls, IAM policies, VPCs, databases/data warehouses (PostgreSQL, Snowflake), API security, container security, and network monitoring
  • Access Controls: Manage and maintain access controls across server environments, implementing principle of least privilege
  • Data Classification: Advise and audit the proper handling of data in accordance with privacy and security requirements and data classification policies
  • Integration Security: Review and assess security implications of all third-party integrations and vendor relationships
  • Fulltime
Read More
Arrow Right