Senior Product Security Engineer - Mobile

About this role

ABOUT RAYA

Raya is a technology company that operates an exclusive, membership-based social network, comprising two primary applications. The Raya application facilitates social networking, emphasizing connections among individuals within creative industries, and requires a selective application process. Raya App, Inc., also offers "Places," a travel application that provides curated destination recommendations. Both applications underscore the company's focus on fostering private online communities and upholding values such as trust, respect, and privacy.

We are seeking a highly skilled and experienced Senior Product Security Engineer to lead our efforts particularly in securing our Apple mobile iOS application and its related infrastructure. This role will be pivotal in embedding security best practices throughout the software development lifecycle, from design to deployment, with a specific focus on our iOS app. The ideal candidate will possess a strong technical background in mobile security, excellent leadership abilities, and a proactive approach to identifying and mitigating security risks within the mobile ecosystem. This position will report directly to the Head of Information Security, and act as the technical lead of our Green Security Team, but not have any direct reports.

Responsibilities

- iOS App Security Architecture & Design:
 Lead the security review of iOS application architecture and design, ensuring security is built-in from the ground up.
- Code Review and Static/Dynamic Analysis:
 Conduct security-focused code reviews for the iOS application, and implement/manage static and dynamic application security testing (SAST/DAST) tools.
- Vulnerability Management (Mobile):
 Oversee the identification, assessment, and remediation of vulnerabilities within the iOS application and its supporting infrastructure.
- Threat Modeling:
 Perform threat modeling for new features and existing components of the iOS application and its b...