Senior Staff Mobile Security Engineer
Tools for Humanity is a technology company building products for humans in the age of AI. It contributes to World and develops proof-of-human hardware and software, including the Orb, alongside World App services for World ID and digital-asset management.
Maintainer signals as of 8/12/2026
Projects
About Tools for Humanity
Tools for Humanity is a technology company founded in 2019 and headquartered in San Francisco and Munich. It builds and operates services including World ID App and World App, which provide interfaces for creating and using World ID, accessing Mini Apps, and managing digital assets through a self-custodial wallet. It also develops the Orb and Orb Mini proof-of-human hardware and software, using encrypted iris-imaging processes and open-source components, and leads design and planning for World Spaces.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design, build, and operate security systems for Android and iOS applications. You will implement device attestation, anti-tampering protections, cryptographic biometric protocols, server-side verification infrastructure, threat models, secure development practices, vulnerability management, and mobile security tooling.
Requirements
- 8+ years of hands-on experience in mobile security engineering
- Deep expertise in Android or iOS
- Experience designing and operating mobile device attestation systems
- Experience with mobile application hardening
- Experience with mobile reverse engineering and offensive security
- Proficiency in Kotlin, Java, or Swift
- Experience securing on-device cryptographic operations
- Understanding of mobile-specific attack vectors
Responsibilities
- Design and operate mobile device attestation and integrity verification systems
- Engineer anti-tampering, anti-hooking, and runtime integrity protections
- Own the mobile hardening strategy
- Design cryptographic protocols for on-device biometric authentication
- Build and maintain server-side attestation verification infrastructure
- Lead threat modeling for mobile-specific attack surfaces
- Perform mobile code reviews and build automated security checks
- Mature the mobile vulnerability management process
- Evaluate and manage mobile security tooling and vendors
Benefits
- Healthcare
- Dental insurance
- Vision insurance
- 401(k) plan and match
- Life insurance
- Flexible time off
- Commuter benefits
- Professional development stipend
- Long-term incentive package