Overview:
You’ll collaborate with a cross-functional team to design and implement a highly secure mobile app SDK for enabling resilient payments along with a reference app using the SDK. You’ll work closely with product, architecture, and security specialists to deliver a robust, scalable, and secure solution.
Key Responsibilities:
- Develop native Android and iOS components (Kotlin/Swift) and backend integration points for proximity communication, payment flows, and secure transaction handling.
- Implement secure, resilient payment capabilities and seamless integration with financial platforms.
- Proactively participate in secure code review, remediation, threat modeling, and security testing across the development lifecycle.
- Design and implement developer-friendly APIs and modular SDK components with strong error handling, observability, and comprehensive validation through unit tests and functional tests
- Collaborate closely with team members, including architects, product owners, and security specialists;
contribute to knowledgetransfer and sustainable maintenance.
- Ensure compliance with relevant standards and regulations (e.G., OWASP MASVS, PCI, PSD2, EMV, GDPR) and maintain secure coding practices.
- Deliver in an agile environment with regular sprint demos and frequent progress updates.
Required Competences:
- Native mobile development for Android and iOS (Kotlin/Swift);
experience with optional cross-platform options (React Native, Flutter) when appropriate.
- Proficiency in proximity communication technologies (NFC, Bluetooth, QR code) and device-to-device secure protocols.
- Hands-on experience with secure handling of sensitive data, and resilient transaction workflows.
- Strong secure coding practices, encryption, secure storage, and familiarity with Secure Elements/TEE.
- Ability to design and implement secure, modular SDK components and developer-friendly APIs.
- Knowledge of and experience with regulatory/compliance domains relevant to financial services (PCI, PSD2, EMV, GDPR).
- Experience with automated testing (unit, integration, security testing) and threat modeling.