Description:

Develop and maintain the Risk SDK on Android (Java/Kotlin, NDK) or Web (JavaScript/TypeScript).
Build risk environment detection capabilities (HOOK, Debug, device tampering, etc.).
Develop code-hardening capabilities, including research and development of code obfuscation, VMP and related technologies.
Collaborate with backend and strategy teams on signal reporting, data quality, and detection efficacy evaluation.

Requirements:

Proficient in one or more programming languages: Java, C/C++, ARM assembly, TypeScript, JavaScript.
3+ years of client-side development experience, with Android or Web development capability.
Reverse engineering skills on Android (Smali/DEX, native SO layer) or Web (JS deobfuscation, protocol analysis).
Familiar with Android system internals or the browser runtime environment (app lifecycle, signature mechanism, JNI, WebView, JS engine, etc.).
Familiar with common attack techniques: hooking frameworks, emulators/cloud phones, app multi-boxing/cloning, repackaging, automated clients, and corresponding countermeasures.
Strong engineering discipline: code quality, performance and stability awareness (package size, startup time, crash rate, compatibility).

Shape the future of finance.
Collaborate with world-class talent in a user-centric global organization with a flat structure.
Tackle challenging projects in a fast-paced and innovative environment with autonomy.
Thrive in a results-driven workplace with opportunities for career growth and continuous learning.
Competitive salary and company benefits.
Remote-first, work-from-home arrangement (may vary depending on the nature of the role and team).

Skills