Red Team Engineer

iProov provides science-based biometric solutions that enable the world’s most security-conscious organizations to streamline secure remote onboarding and authentication for digital and physical access. As we continue to scale, we are looking for an experienced Red Team Engineer specialising in mobile application security (iOS and/or Android) to join our growing Red Team function. This role will focus on assessing and challenging the security of iProov’s mobile SDKs, applications, and biometric identity flows, ensuring we remain resilient against increasingly sophisticated threats, including deepfakes, device compromise, and adversarial manipulation. You will play a critical role in proactively identifying weaknesses, simulating real-world attacks, and strengthening our ability to detect and respond to threats across mobile environments.

Responsibilities

Design and execute Red Team operations targeting mobile applications, SDKs, and biometric identity flows across iOS and Android; Perform advanced mobile application penetration testing, including reverse engineering, runtime manipulation, and bypass techniques; Simulate realistic attack scenarios such as device compromise (rooted/jailbroken environments), emulator and instrumentation attacks, biometric spoofing and presentation attacks, mobile API abuse and session manipulation; Identify vulnerabilities in mobile architectures, authentication flows, and client-side controls; Conduct research into emerging mobile threat actor tactics, techniques, and procedures (TTPs), particularly in biometric and identity systems; Develop proof-of-concept exploits and tooling to replicate real-world attack scenarios; Produce clear, actionable reports with risk-ranked remediation guidance for engineering and product teams; Collaborate closely with mobile engineers, product, and security teams to translate findings into practical fixes; Provide code-level and architectural guidance to improve mobile application security; Validate remediations and ensure vulnerabilities are effectively addressed; Contribute to improving detection capabilities within iProov’s security ecosystem (including iSOC); Mentor engineers on secure mobile development practices and threat modelling; Ensure all activities align with rules of engagement, legal, and regulatory requirements

Requirements

5+ years’ experience in Red Teaming, penetration testing, or mobile security research; Strong hands-on expertise in mobile application security (iOS and/or Android); Experience with reverse engineering tools (e.g. Frida, Objection, Ghidra, Hopper, IDA Pro); Experience with mobile testing frameworks and interception tools (e.g. Burp Suite, mitmproxy); Experience with analysing mobile binaries (APK/IPA), obfuscation, and runtime protections; Deep understanding of mobile OS internals (Android/iOS security models); Deep understanding of secure storage, keychains/keystores, and cryptographic implementations; Deep understanding of authentication protocols and identity flows (OAuth, biometrics, session handling); Experience identifying and exploiting client-side trust issues; Experience identifying and exploiting certificate pinning bypasses; Experience identifying and exploiting anti-tampering and anti-debugging controls; Ability to build or customise tooling and scripts for mobile security testing; Experience communicating complex technical findings to both technical and non-technical audiences; A passion for offensive security and creatively breaking systems to make them stronger; Comfortable operating in a high-growth, fast-paced environment

Benefits

Company Performance Bonus (10%); Share Options; 25 days Annual Leave, plus 8 Bank Holidays (more holiday with service - up to an extra 5 days off per year based on continuous service); Growth Shares allocated after passing probation (6 months of service); Salary sacrifice schemes including Pension, Cycle To Work and Electric Car Scheme; Nursery Sacrifice Scheme; Work Overseas Perk - Work globally for up to 2 weeks; Life Assurance; SmartHealth - Access to private GP, Psychologist, Nutritionist along with tailored fitness plans for you and your family; Personalized 1:1 career coaching with in-house Occupational Psychologist; Award winning L&D platform with personal allocated training budgets; Enhanced paid family leave; Pension - 5% employee, 3% employer; Flexible hybrid working environment; Free Barista Coffee/Tea, biscuits with fruit in the WeWork office; Free access to WeWork discounts and free online well-being sessions; Vitality Health - Private Health cover including Dental, Optical, and Audiology; 50% off monthly gym memberships; Apple watches significantly discounted based on member vitality status; Half price trainers with Runners Need; Weekly rewards - Free coffee with Café Nero; Monthly rewards - Free Cinema ticket; Discounts on travel with Expedia (hotels) and Mr & Mrs Smith; Amazon Prime free months based on activity; Up to 25% cashback at Waitrose when buying healthy foods; 75% off stays at Champneys Health Spas; Allen Carr’s £299 no smoking programme for free; Access to Vitality Healthy Mind with 30% off Headspace subscriptions and ability to earn Vitality points for using Buddhify, Calm and Headspace; Discounts on Weight Watchers; 50%-80% off Comprehensive Private Health screenings