Senior/Staff Mobile Security Engineer
AI summary of the role
Senior/Staff Mobile Security Engineer owning the security and integrity of the World App (Android/iOS) used by millions for identity verification and digital asset management.
What you’ll do
- Design, build, and operate mobile device attestation and integrity verification systems across Android and iOS.
- Engineer anti-tampering, anti-hooking, and runtime integrity protections for the World App.
- Own the mobile hardening strategy end-to-end: certificate pinning, secure storage, obfuscation, jailbreak/root detection, debugger detection, and screen capture protection.
- Design cryptographic protocols for on-device biometric authentication resistant to replay, relay, and deepfake injection attacks.
What you’ll bring
- 8+ years hands-on mobile security engineering with deep expertise in Android or iOS (both ideal).
- Proven experience designing and operating mobile device attestation systems (Android Hardware Key Attestation, Play Integrity, Apple App Attest).
- Strong background in mobile application hardening (anti-tampering, anti-hooking, root/jailbreak detection, runtime integrity).
- Experience with mobile reverse engineering and offensive security (jadx, apktool, Frida, Objection).
Technologies
Android · iOS · Kotlin · Swift · Java · Frida · Xposed · Android KeyStore · Apple App Attest · Play Integrity
About Tools for Humanity
Builds World (formerly Worldcoin) — the Orb iris scanner, World ID privacy proofs, and World App — a human-verification network distinguishing real people from AI bots.
Private Late · 500–1000 people
Source and classification
Internal deployment & tooling · Evidence for this classification:
Security Engineer, you will own the security and integrity of the mobile applications at the core of the World protocol World App on Android and iOS used by millions of people worldwide to verify their identity, authenticate with biometrics, and manage digital assets. This is not a consultative role; you will be a hands-on builder, designing and implementing the systems that ensure our mobile clients are trustworthy, tamper-resistant, and resistant to adversarial attack at global scale. Our mobile threat model is uniquely challenging: the World App must perform privacy-preserving biometric operations (iris and face authentication) on-device, hold cryptographic keys for identity proofs, and interact with hardware attestation systems all while operating in environments where adversaries range from casual fraud to nation-state-level identity fabrication at scale. You will be the expert
More from the job description
About the Company: Tools for Humanity (TFH) designs and builds technology behind World. World is building a real human network designed to accelerate people in the age of AI. As bots and autonomous agents reshape the internet, people, institutions, and applications need a trusted way to confirm who is a real human while preserving privacy. The TFH and World tech stacks make this possible: the Orb verifies real, unique people, World ID proves it privately, and World App puts these capabilities, and more, in people’s hands. Together, they add a human layer to an AI-driven internet. World is already running at a global scale. More than 17 million people across 160 countries have verified with World ID, and more new Orb verifications take place each week. World App is already among the most used wallets globally. Developers are integrating World ID to build safer online experiences and create spaces where real people can participate, earn, and be recognized in ways AI simply can’t replicate. Founded in 2019, TFH has more than 400 people across hardware, software, AI, cryptography, mobile engineering, and global operations. Our teams come from OpenAI, Tesla, SpaceX, Apple, Google, Stripe, Meta, Coinbase, Palantir and MIT Media Lab. We’re backed by leading investors, including a16z, Khosla Ventures, Bain Capital Crypto, Blockchain Capital, Variant, Tiger Global, and Coinbase Ventu [... source excerpt omitted ...] bling the protocol to scale to billions of users while upholding an unwavering commitment to fail-safe security and privacy. About the Opportunity As a Mobile Security Engineer, you will own the security and integrity of the mobile applications at the core of the World protocol World App on Android and iOS used by millions of people worldwide to verify their identity, authenticate with biometrics, and manage digital assets. This is not a consultative role; you will be a hands-on builder, designing and implementing the systems that ensure our mobile clients are trustworthy, tamper-resistant, and resistant to adversarial attack at global scale. Our mobile threat model is uniquel [... source excerpt omitted ...] , and interact with hardware attestation systems all while operating in environments where adversaries range from casual fraud to nation-state-level identity fabrication at scale. You will be the expert who ensures this stack cannot be subverted. You will: Design, build, and operate mobile device attestation and integrity verification systems across Android and iOS including hardware-backed key attestation (Android KeyStore TEE/StrongBox, Apple App Attest/Secure Enclave), ensuring requests originate from genuine, untampered devices running unmodified app code. Engineer anti-tampering, anti-hooking, and runtime integrity protections for the World App, making the app resilient a
Employer postings · Data from · Sources