Mobile Security Engineer

Job Title: Mobile Security Engineer
Location: Springfield, Boston, or NY office; 3 days/week onsite
Duration: 12 months

Required Skills:

• Design, validate, and operationalize automated mobile vulnerability scanning & configuration compliance for enterprise iOS/iPadOS and Android endpoints.
• Define PoT scope, success criteria, test plans, and evaluate agent-based/agentless, MDM-integrated, API-driven solutions.
• Assess coverage, detection accuracy, scalability, device impact, privacy, and reporting.
• Validate OS versions, CVEs, patch levels, risky apps, encryption, jailbreak/root, screen lock, OS hardening.
• Integrate with Intune, Workspace ONE, Jamf, SIEM, ITSM, CMDB.
• Produce PoT findings, risk analysis, cost/benefit, architecture decision record, and go/no-go recommendation.
• Align SaaS security posture with InfoSec, Compliance, and NYDFS requirements.
• Build vulnerability lifecycle: discovery, assessment, prioritization, remediation, validation, and reporting.
• Develop mobile risk scoring based on exposure, device role, app risk, and compliance impact.
• Coordinate remediation with endpoint engineering, mobility admins, app owners, and operations.
• Develop and improve security baselines for iOS/iPadOS and Android.
• Implement policies for password/biometrics, encryption, OS updates, app controls, certificates/profiles, VPN/Wi-Fi security, logging.
• Implement compliance monitoring, drift detection, and automated/semi-automated remediation.
• Build automation scripts and APIs to normalize/enrich findings.
• Support change management, user-impact communications, operations training, and ongoing support.