Senior Mobile SDK Developer (Android)
About The OpportunityResponsible for refactoring the Android MiSnap SDK security layer to defend against advanced injection attacks and achieve CEN/TS 18099 compliance based on Security Engineer recommendations. This engineer will integrate Android Hardware-Backed Keystore and KeyAttestation APIs to establish non-spoofable device identity, refactor native camera wrappers (Camera2/CameraX) for untampered frame transmission, and extract cross-frame sensor correlation data. Additionally, they will optimize native C/C++ (NDK) components to harden the runtime against dynamic analysis, memory hooking (Frida/Xposed), and emulator-based injection without introducing capture latency or increasing false rejections.ResponsibilitiesHardware Attestation Implementation: Integrate Android Hardware-Backed Keystore and KeyAttestation APIs to generate cryptographically signed device identity evidence.Camera Pipeline & Frame Integrity: Refactor native camera wrappers (Camera2 / CameraX) to secure the frame chain-of-trust from camera capture to analysis, preventing virtual camera injection and eliminating legacy false rejections.Sensor Correlation & Telemetry: Implement cross-frame analysis of hardware sensor metadata (accelerometer, autofocus events, exposure tracking) to validate physical camera presence.Security Check Consolidation: Refactor and consolidate native software security checks (anti-debugging, anti-hooking/Frida, root detection, environment integrity) into hardened C/C++ (NDK) modules using obfuscation techniques (OLLVM).Performance Benchmark Compliance: Enforce client performance targets across all changes: False Rejection Rate (FRR) ≤ 1%, zero perceptible capture lag, minimal battery drain, and total payload size SOW Requirement CoverageSOW Requirements 2.1 & 2.2: Integrates Android KeyAttestation for hardware-level credentials and rebuilds native Camera2/CameraX frame pipelines to block frame injection while eliminating legacy false rejections.SOW Requirements 2.3 & 2.5: Implements real-time cross-frame sensor correlation (exposure, autofocus, motion) and consolidates native C++ NDK security checks against dynamic tampering.SOW Requirement 2.7 & Performance Specs: Systematically enforces performance metrics ensuring False Rejection Rate (FRR) ≤ 1%, payload size remains under 2MB, and no perceptible capture lag or battery drain is introduced.Risk MitigationEnsures low-level Android security checks do not trigger false positives on legitimate, non-standard OEM devices while maintaining strict real-time capture performance.Required QualificationsTechnical Stack: 5+ years of production Android SDK engineering experience using Kotlin, Java, and C/C++ (Android NDK / JNI).Camera Systems Expertise: Deep expertise in Android camera architecture (android.hardware.camera2, CameraX) and raw preview/analysis frame buffer management.Security Implementation Experience: Practical experience implementing KeyAttestation/Play Integrity APIs, cryptographic verification, and anti-reverse-engineering mechanisms (anti-debugging, memory inspection).Nice To Have SkillsAvenue Code reinforces its commitment to privacy and to all the principles guaranteed by the most accurate global data protection laws, such as GDPR, LGPD, CCPA and CPRA. The Candidate data shared with Avenue Code will be kept confidential and will not be transmitted to disinterested third parties, nor will it be used for purposes other than the application for open positions. As a Consultancy company, Avenue Code may share your information with its clients and other Companies from the CompassUol Group to which Avenue Code’s consultants are allocated to perform its services.