Senior Native Android/iOS Developer

Job Description :

Key Responsibilities :

1. SDK Architecture and Engineering :

• Design, architect, and evolve scalable, secure, and high-performance native Android and iOS SDKs.
• Establish SDK architecture, modularization, public API design, versioning strategies, and backward-compatibility standards.
• Lead the development of reusable SDK components using Kotlin/Java, Android NDK/C++ where required, Swift, and Objective-C.
• Optimize SDK binary size, cold-start latency, memory footprint, initialization overhead, and runtime performance.
• Design integration patterns that minimize implementation effort and compatibility issues for banking and fintech partners.
• Define SDK integration contracts, configuration models, error handling, and developer-facing APIs.
• Develop sample applications, integration documentation, migration guides, and diagnostic tooling.
• Review code and architecture proposals, enforce engineering standards, and mentor junior and mid-level engineers.

2. Advanced Device Security and Anti-Fraud:

• Design and implement robust root/jailbreak detection and identify emulators, debuggers, hooking frameworks, and runtime instrumentation.
• Develop and harden detection mechanisms against tools and techniques such as Frida, Xposed, Cydia Substrate, and related injection frameworks.
• Architect RASP capabilities covering runtime integrity verification, anti-tampering, anti-repackaging, obfuscation, and suspicious execution detection.
• Design privacy-conscious device fingerprinting mechanisms that generate reliable signals for fraud detection and risk assessment.
• Evaluate bypass techniques, perform security-focused testing, and proactively strengthen detection and mitigation mechanisms.
• Balance detection effectiveness with false-positive rates, device compatibility, performance, and legitimate user experience.
• Collaborate with security research, fraud analytics, and machine learning teams to integrate device risk signals into fraud detection systems.
• Define approaches for securely collecting, validating, and transmitting device security telemetry.

3. Android and iOS Platform Security :

• Lead security-focused implementation across Android and iOS, with deep expertise in at least one platform and working knowledge of the other.
• Integrate and evaluate Android Keystore, Play Integrity API, iOS Keychain, Secure Enclave, and App Attest.
• Design secure SDK-to-server communication flows involving token exchange, certificate pinning, replay protection, and appropriate cryptographic controls.
• Implement secure local storage, sensitive-data handling, integrity verification, and platform-specific security controls.
• Evaluate low-level platform capabilities and Android NDK/C++ or native iOS techniques where they improve security.
• Stay current with OS security changes, platform restrictions, new attack vectors, and evolving mobile security best practices.
• Assess security trade-offs and recommend practical mitigations for production environments.

4. Quality Engineering and Production Ownership :

• Define SDK quality standards covering crash-free rate, ANR rate, startup performance, memory usage, compatibility, and release stability.
• Establish comprehensive testing strategies across real devices, OS versions, manufacturers, and application configurations.
• Design automated unit, integration, compatibility, and regression testing for SDK components.
• Build and improve CI/CD pipelines for SDK compilation, security checks, automated testing, artifact publishing, and staged rollouts.
• Lead root-cause analysis of complex production issues, security incidents, and partner integration failures.
• Own release readiness, version rollout strategies, regression prevention, and production stability improvements.
• Establish monitoring, diagnostics, and support processes for L2/L3 partner integration issues.

5. Partner Engineering and Cross-Functional Collaboration :

• Work directly with banking, fintech, and enterprise partners to resolve complex SDK integration and compatibility challenges.
• Lead technical discussions, partner onboarding, integration validation, and certification activities.
• Collaborate with backend engineering teams on secure APIs, authentication flows, telemetry ingestion, and device risk assessment.
• Partner with fraud and ML teams to improve the quality and usefulness of device-derived risk signals.
• Coordinate with security teams on threat modeling, vulnerability assessment, remediation, and security validation.
• Translate partner requirements and production findings into SDK roadmap improvements.

Required Skills and Qualifications :

• 6 - 8 years of hands-on native mobile engineering experience.
• Strong expertise in at least one platform :
• Android : Kotlin, Java, Android SDK, Gradle, and preferably NDK/C++.
• iOS : Swift, Objective-C, Xcode, and platform-native security frameworks.
• Proven experience building, releasing, and maintaining production SDKs or libraries consumed by external developers or partner applications.
• Strong understanding of SDK architecture, public API design, semantic versioning, dependency management, and backward compatibility.
• Hands-on experience with mobile security controls, including root/jailbreak detection, anti-tampering, and code obfuscation.
• Practical knowledge of RASP, runtime integrity checks, hooking/injection detection, and anti-repackaging techniques.
• Experience with device fingerprinting or mobile device risk signals.
• Strong understanding of Android Keystore and Play Integrity API, and/or iOS Keychain, Secure Enclave, and App Attest.
• Experience implementing secure communication controls, including certificate pinning, secure token handling, and replay protection.
• Demonstrated ability to debug complex issues across physical devices, manufacturers, and OS versions.
• Experience with CI/CD, automated testing, production diagnostics, and SDK release management.
• Strong technical leadership, code review, problem-solving, and cross-functional communication skills.