Senior Android SDK Engineer for the new mobile line of an anti-bot platform — remote or hybrid

About the company

A product company in cybersecurity. It develops solutions that protect web services, APIs and infrastructure from automated traffic, bots and other network threats.

The company works with business-critical services where availability, resilience to attacks and protection of user data matter. The company is now developing an anti-bot platform that already works well in the browser and WebView. The next stage is protecting native mobile apps.

About the role

A Senior Android engineer who has already worked with Android SDKs, libraries or infrastructure mobile components and understands how such code lives inside someone else's production app.

The focus of the role is to design and develop an Android SDK for the anti-bot platform from scratch: integration into client apps, mobile telemetry, app integrity checks, protected client-server flow, short-lived trust token and WebView / JavaScript challenge logic.

What you will do

• Design and develop an Android SDK for anti-bot / anti-abuse protection of native mobile apps.
• Integrate the SDK into the network layer of Android apps: OkHttp, Retrofit, interceptors, custom HTTP clients.
• Collect compact telemetry: app version, package name, signing cert hash, SDK version, OS / device / runtime / environment signals.
• Implement a protected client-server flow: bootstrap / server nonce, telemetry collection, protected envelope, attestation request, short-lived trust token.
• Work with app integrity checks, Play Integrity API, root / emulator / debugger / hooking indicators.
• Implement secure storage, refresh and transmission of the anti-bot token on API requests.
• Integrate the SDK with the current WebView / JavaScript challenge logic.
• Make the SDK production-ready: safe degradation, retries, timeouts, debug mode, feature flags, backward compatibility.
• Take part in threat modeling, code review, external audit fixes and rollout in shadow / enforcement mode.
• Prepare integration documentation: SDK API, integration guide, edge cases, debugging notes.

What matters

• Strong experience in Android development in Kotlin and/or Java.
• Experience developing SDKs, libraries or infrastructure mobile components.
• Understanding of Android lifecycle, storage, permissions, networking.
• Experience with the network layer of Android apps: OkHttp, Retrofit, interceptors.
• Practical understanding of HTTP, cookies, headers, redirects, TLS, API sessions.
• Understanding of the Android security model.
• Understanding of secure client-server communication: nonce, signatures / MAC, encryption, token TTL, replay protection.
• Ability to write stable, testable, backward-compatible production code.
• Readiness to document the SDK API, integration guide and edge cases.
• Interest in mobile security / anti-fraud / anti-bot tasks

Nice to have

• Experience in mobile security, anti-fraud, anti-bot or anti-abuse.
• Experience with Play Integrity API / attestation.
• Experience with root / emulator / debugger / hooking detection.
• Experience with Frida, JADX, apktool, Burp Suite, mitmproxy.
• Experience with JNI / NDK / C / C++ / Rust for Android.
• Experience with WebView, JavaScript bridge, browser fingerprinting or challenge systems.
• Understanding of ML / risk scoring, false positives, reason codes, shadow mode.
• Experience with threat modeling, security review or external audit fixes.
• Experience in fintech, banking, payments, iGaming, betting or other products with high-risk traffic and sensitive user data.

Terms

• Flexible work format: remote, hybrid or onsite possible in some locations.
• Voluntary health insurance / medical insurance, including dental.
• Education reimbursement after the probation period.
• Quarterly bonuses based on company results.