Mobile Application Security Engineer

Responsibilities

• Engage across the complete mobile security lifecycle and contribute to secure solution design.
• Perform reverse engineering and vulnerability analysis on diverse software problems.
• Define operational parameters for complex systems to guide secure deployments.
• Leverage automation and machine learning to influence delivery and outcomes of security work.
• Assess feasibility of innovative security ideas and translate them into actionable client solutions.

Requirements

• 2+ years of hands-on experience with iOS and Android mobile operating systems.
• Knowledge of static and dynamic mobile app security analysis concepts.
• Experience with protocol and network analysis using mitmproxy and Wireshark.
• Familiarity with common mobile application vulnerabilities and mobile threats.
• Active Secret clearance.
• Bachelor's degree.

Nice to have

• Experience developing iOS and Android mobile applications.
• Experience with reverse engineering tools and frameworks such as Frida, APKtool, Jadx, MobSF, NowSecure, or Quokka.
• Knowledge of mobile authentication and encryption methods, including OAuth and PKI.
• Knowledge of MASVS, MASTG, and related OWASP mobile security standards.
• Knowledge of OWASP Mobile Top 10 and the Mobile Security Testing Guide (MSTG).
• Strong verbal and written communication skills.
• Security certifications such as Security+, CEH, SANS Mobile Device Security, or equivalent.

Technologies

• iOS
• Android
• Mitmproxy
• Wireshark
• Frida
• APKtool
• Jadx
• MobSF
• NowSecure
• Quokka
• OAuth
• PKI

Benefits

• Health, life, disability, financial, and retirement benefits, plus paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible to participate in Booz Allen’s benefit programs; individuals who do not meet the threshold are eligible for select offerings, excluding health benefits.

Clearance

• Secret clearance is required; applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.

Compensation

• Salary range: USD 69,400 to 158,000 per year.

Identity Verification

• As part of the hiring process, Booz Allen may require identity verification using biometrics and AI. You may be asked to appear on camera during interviews and assessments, and Booz Allen reserves the right to capture images to verify identity and prevent fraud.

Candidate AI Usage Policy

AI is part of Booz Allen's daily work, and the company supports responsible use of AI tools. The use of AI or other tools to assist with interview responses is prohibited unless explicit permission is granted.

Work Model

• Onsite work at Booz Allen or customer facilities, with collaboration with colleagues and clients as required by the role.

Non-discrimination Commitment

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.