Information Security Engineer (AppSec Mobile) - Camera Injection

About Revolut

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products — including spending, saving, investing, exchanging, travelling, and more — help our 60+ million customers get more from their money every day.

As we continue our lightning-fast growth,‌ 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work™. So far, we have 10,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.

About the role

Our Technology team isn’t just one of the best in the industry, it’s one of the best in the world. And we’re proud of it. It’s our driving force, our engine. From building a new banking backend to creating an award-winning app, there’s nothing (and we mean nothing) our tech team can’t do.

Our Technology team isn’t here to fix legacy systems — it’s here to build world-class financial products from the ground up. Products that'll be used by millions of people around the world.

We’re looking for an Application Security Engineer (Mobile) to join our Information Security team.

But it’s not that easy — remember, we Never Settle.

You’ll need to show your passion with bug bounty findings, community talks, certifications, and blog posts on your interest.

If this is ‘so you’, you know where to find us.

What you'll be doing

• Supporting security, technology, and business teams with expertise and guidance on key initiatives
• Conducting thorough security assessments of mobile applications, identifying vulnerabilities and potential attack vectors
• Leading efforts to implement and enhance security controls in mobile applications
• Collaborating closely with the development team to ensure security is integrated into the SDLC (Secure Development Lifecycle)
• Researching and staying up-to-date with the latest mobile security threats, trends, and best practices
• Developing and delivering security training and awareness programs for the development team
• Researching methods to simulate camera injections on Android devices for security testing
• Developing detection techniques for identifying camera injection attempts
• Establishing a new team focused on secure Biometric Identification solutions

What you'll need

• Hands-on experience in mobile security, with a proven track record of identifying and mitigating security vulnerabilities
• Extensive experience in mobile application development, with proficiency in Kotlin or Android SDK
• A solid understanding of security protocols, encryption, and authentication mechanisms
• Knowledge of relevant security frameworks, such as OWASP MASVS
• Expertise implementing and bypassing controls like certificate pinning, facial recognition, and biometric authentication controls
• Experience with secure coding practices and familiarity with industry standards (e.g., ISO 27001, NIST)
• Background in modifying the Android HAL and kernel-level programming
• Familiarity with SE Linux and secure boot environments
• Expertise in Android device drivers, especially camera-related modules
• Understanding of custom kernel compilation for Android
• Knowledge of Android 10 system internals

Nice to have

• Experience developing virtual camera drivers or working with media injection in Android systems
• Experience with Google’s AOSP and custom ROM development

Compensation range

• Lithuania: €4,900 - €7,500 gross monthly*
• Other locations: Compensation will be discussed during the interview process

*Final compensation will be determined based on the candidate's qualifications, skills, and previous experience

Building a global financial super app isn’t enough. Our Revoluters are a priority, and that’s why in 2021 we launched our inaugural D&I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We’re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That’s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.

Important notice for candidates:

Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.

• Only apply through official Revolut channels. We don’t use any third-party services or platforms for our recruitment.

• Always double-check the emails you receive. Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.

We won't ask for payment or personal financial information during the hiring process. If anyone does ask you for this, it’s a scam. Report it immediately.

By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's Candidate Privacy Notice