Latest AI JobsBrowse Jobs
Tools for Humanity logo

Senior/Staff Mobile Security Engineer

Tools for HumanitySan FranciscoEngineering
Apply on company site
Salary
$251K - $325K USD
Job type
Full-time
Posted
15 Apr 2026
Status
Open · checked 7d ago

About this role

Role Overview

The Senior/Staff Mobile Security Engineer at Tools for Humanity in San Francisco owns the security and integrity of the mobile applications at the core of the World protocol. This role is ideal for a hands-on technical expert who wants to build systems ensuring mobile clients are trustworthy, tamper-resistant, and protected against adversarial attacks at a global scale.

Key Responsibilities

Design, build, and operate mobile device attestation and integrity verification systems across Android and iOS, including hardware-backed key attestation.
Engineer anti-tampering, anti-hooking, and runtime integrity protections for World App to resist reverse engineering and repackaging attacks.
Own the end-to-end mobile hardening strategy, encompassing certificate pinning, secure storage, obfuscation, and detection mechanisms for root, jailbreak, debuggers, and screen capture.
Design cryptographic protocols for on-device biometric authentication like Face Auth and selfie verification to prevent replay, relay, and deepfake injection attacks.
Build and maintain server-side attestation verification infrastructure, such as the Attestation Gateway, to validate Play Integrity tokens, certificate chains, and Apple App Attest assertions.
Lead threat modeling initiatives covering mobile-specific attack surfaces including biometric bypass, key extraction, device cloning, session hijacking, and overlay attacks.
Embed security into the mobile development lifecycle through deep code reviews of Kotlin and Swift code, automated CI/CD security checks, and secure coding standards.
Mature the mobile vulnerability management process by triaging bug bounty submissions and driving remediation.
Evaluate, integrate, and manage mobile security tooling and vendor relationships.

Requirements

Minimum of 8 years of hands-on experience in mobile security engineering, featuring deep expertise in Android or iOS (or strong proficiency in both).
Proven experience designing and operating mobile device attestation systems at a systems level, such as Android Hardware Key Attestation, Google Play Integrity API, or Apple App Attest.
Strong background in mobile application hardening, including anti-tampering, anti-hooking, root/jailbreak detection, debugger detection, certificate pinning, and runtime integrity protection.
Experience with mobile reverse engineering and offensive security using tools like jadx, apktool, and Frida or Objection.
Proficiency in Kotlin, Java, and Swift for security-focused code reviews and security library development.
Experience securing on-device cryptographic operations, key generation, and secure storage mechanisms.
Strong understanding of mobile-specific attack vectors including overlay attacks, accessibility service abuse, screen recording, and camera pipeline deepfake injection.

Nice to Have

Experience building or operating server-side attestation verification services.
Experience with RASP vendor evaluation and integration.
Background in payment security or PCI-compliant mobile applications.
Familiarity with privacy-preserving systems like zero-knowledge proofs, on-device biometric processing, or differential privacy.
Experience scaling a Secure SDLC or security champions program for mobile engineering teams.
Contributions to mobile security research, conference talks, or open-source security tooling.
Experience with Rust, Go, or Python for backend security tooling and infrastructure.

Skills and Tools

Python
Java
Rust
Kotlin
Swift
Android KeyStore TEE/StrongBox
Apple App Attest/Secure Enclave
Google Play Integrity API
Frida and Objection
jadx and apktool

Salary and Benefits

Tools for Humanity offers a reasonably estimated salary range of $251,000 to $325,000 per year, plus a competitive long-term incentive package. Actual compensation depends on factors such as skills, qualifications, and experience. Comprehensive employee benefits include healthcare, dental, vision, a 401(k) plan with match, life insurance, flexible time off, commuter benefits, and a professional development stipend.

About the Company

Tools for Humanity designs and builds the technology behind World, a real human network created to help people thrive in the age of AI. The tech stack includes the Orb for verifying real, unique people, World ID for private proof, and World App for managing digital capabilities. Founded in 2019, Tools for Humanity brings together over 400 people across hardware, software, AI, cryptography, mobile engineering, and global operations with teams originating from prominent technology and research institutions.

How to Apply

Interested candidates should submit their application directly through the official company careers page.

Skills and tech stack

PythonJavaRust

Questions candidates ask

What is the salary range for the Senior/Staff Mobile Security Engineer role?

The reasonably estimated salary ranges from $251,000 to $325,000 per year, accompanied by a competitive long-term incentive package and comprehensive benefits.

Where is this position located?

This position is located in San Francisco, California.

How many years of experience are required?

Candidates must have 8+ years of hands-on experience in mobile security engineering.

What programming languages are relevant to this role?

Required and nice-to-have programming languages mentioned include Python, Java, Rust, Kotlin, Swift, and Go.

How do I apply for this job?

You can apply by submitting your application directly on the official company careers page.

Ready to apply?

The application is on the official Tools for Humanity careers page.

Apply on company site