Sr. Product Security Engineer - iOS Mobile App

We are seeking a highly skilled and experienced Senior Product Security Engineer to lead our efforts particularly in securing our arenaflex mobile iOS application and its related infrastructure. This role will be pivotal in embedding security best practices throughout the software development lifecycle, from design to deployment, with a specific focus on our iOS app. The ideal candidate will possess a strong technical background in mobile security, excellent leadership abilities, and a proactive approach to identifying and mitigating security risks within the mobile ecosystem. This position will report directly to the Head of Information Security, and act as the technical lead of our Green Security Team, but not have and direct reports. Responsibilities • iOS App Security Architecture & Design: Lead the security review of iOS application architecture and design, ensuring security is built-in from the ground up. • Code Review and Static/Dynamic Analysis: Conduct security-focused code reviews for the iOS application, and implement/manage static and dynamic application security testing (SAST/DAST) tools. • Vulnerability Management (Mobile): Oversee the identification, assessment, and remediation of vulnerabilities within the iOS application and its supporting infrastructure. • Threat Modeling: Perform threat modeling for new features and existing components of the iOS application and its backend services. • Secure Development Lifecycle (SDL): Drive the adoption and enforcement of secure development practices within the mobile engineering teams. • API Security: Ensure the security of APIs consumed and exposed by the iOS application. • Cloud Security for Mobile Backend: Manage and refine cloud IAM roles and permissions for the mobile app's backend infrastructure to enforce the principle of least privilege and improve our cloud security posture. • Incident Response (Mobile): Support incident response activities related to the iOS application, including investigation and remediation. • Security Tooling: Evaluate, implement, and manage security tools relevant to mobile application security. • Security Training & Awareness: Provide guidance and training to mobile developers on secure coding practices. • Reporting: Report directly to the Head of Information Security on the security posture of the iOS application and related infrastructure. Qualifications • 8+ years of experience in a security role with a strong focus on application security. • 5+ years of experience in a product security engineering role with a strong focus on mobile (iOS) application security. • Extensive experience with secure coding principles, mobile security frameworks, and common mobile vulnerabilities (e.g., OWASP Mobile Top 10). • Strong understanding of iOS platform security features and best practices. • Proficiency in Swift/Objective-C with a minimum of 3 years of Swift experience, and experience with mobile development tools and environments. • Proficiency in NodeJS with a minimum of 3 years of NodeJS experience, and experience with NodeJS backend mobile development tools and environments. • 3+ years of experience with cloud security principles and cloud IAM (e.g., AWS IAM, Cloud Connectivity) as it relates to mobile backend infrastructure. • Experience with static and dynamic application security testing (SAST/DAST) tools for mobile applications. • Excellent analytical, problem-solving, and troubleshooting skills. • 2+ years of experience in a senior or lead security engineer role. • Strong proficiency of AI coding platforms like Claude Code, Copilot, etc. • Strong leadership and communication skills, with the ability to influence and collaborate across engineering teams. • Ability to prioritize tasks and manage projects effectively in a fast-paced environment. • Experience with scripting and automation (e.g., Python, Bash) for security tasks. • Experience with GitHub Actions. • Experience with DevSecOps and CICD SCA tools. Preferred Qualifications • Experience with mobile penetration testing. • Relevant security certifications (e.g., CISSP, CSSLP, GIAC Mobile Device Security). • Experience with integrating security into arenaflex/CD pipelines for mobile applications. • Experience with securing Artificial Intelligence within a mobile product • Basic experience with Python3.11+ for general scripting and integrations. Apply tot his job

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...