Mobile Security Technician — Sun King (Nairobi)

Mobile Security Technician

Job Description

Sun King is seeking an ethical hacker to join the Cyber Security Team as a Mobile Security Technician. The primary mission of this role is to identify and exploit security loopholes in vendor smartphones and IoT devices to strengthen the digital inclusion of customers. By conducting offensive security assessments and hardware vulnerability reviews, the technician helps prevent device hacking and ensures the integrity of the company’s financial inclusion products. This role provides critical intelligence that informs secure development practices across the hardware and software engineering teams.

Key Responsibilities

• Conduct offensive security assessments of hardware, firmware, and embedded operating systems on mobile devices.
• Reverse engineer firmware and perform static and dynamic reviews to uncover weaknesses in payment stacks and bootloaders.
• Detect and exploit vulnerabilities in MDMs, Android kernel components, and secure boot implementations.
• Develop custom Proof-of-Concept (PoC) code to demonstrate the business impact of potential exploits.
• Perform internal penetration testing across various products and IoT device architectures.
• Contribute to threat modeling and architecture reviews for upcoming features and new hardware products.

Qualifications & Experience

• Strong knowledge of Android security, Mobile Device Management (MDM), and hardware exploitation techniques (JTAG, UART, SWD).
• Hands-on experience with specialized tools such as Flash 64, Pandora, Easy JTag, Chimera, or CM2.
• Proficiency in reverse engineering tools including Ghidra, IDA Pro, Binary Ninja, and JTAGulator.
• Programming and scripting capabilities in Python, C/C++, or Bash.
• Familiarity with secure boot, TPM/TEE, and cryptographic mechanisms in embedded systems.
• Exposure to fintech or payment device security environments is highly desirable.

Method of Application

Apply via:  Sun King (Formerly Greenlight Planet) on sunking.pinpointhq.com