[Hiring] Product Security Engineer @Ditto

Role Description

Ditto Protect is our mobile application security (RASP) platform — the runtime layer that keeps high-assurance apps safe while they run, on devices we do not control. We're hiring a Product Security Engineer to own the runtime defenses that keep every Ditto Protect app trustworthy. This is a hands-on engineering role first and foremost:

• Write production code, contribute to the delivery pipeline, and ship features that close gaps in Ditto Protect.
• Build in-house shields and hardening tooling on top of a licensed RASP core.
• Defeat rooting and jailbreaking, hooking and instrumentation, emulators, tampering and repackaging, malware, and network interception.
• Own applied cryptography beneath secure local storage and app/device attestation.
• Build and operate Ditto Protect's Python backend — services and APIs that ingest threat telemetry from protected apps.
• Evaluate competing solutions and support the Sales & Solutioning team as a technical pre-sales engineer.
• Own capabilities across their lifetime, including ongoing security research, vendor upgrades, and maintenance.

Qualifications

• Strong, current, hands-on software engineering experience.
• Mobile SDK development experience with iOS (Swift/Objective-C) and/or Android (Kotlin/Java).
• Experience integrating and extending third-party or native SDKs via callback/event APIs.
• Applied obfuscation and binary hardening experience across native mobile toolchains.
• Practical understanding of secure data-at-rest storage and attestation.
• Experience designing and building production Python services and APIs, particularly Flask.
• Proven experience building and shipping quickly with AI coding tools.
• Practical experience with delivery pipelines such as GitHub Actions, GitLab CI, Jenkins.
• Solid AWS experience; other cloud providers are a plus.
• Hands-on knowledge of RASP and the mobile threat-and-defence landscape.
• Familiarity with OWASP MASVS / MASTG and the mobile attacker toolkit.
• Ability to evaluate competing security products and support pre-sales.
• Experience collaborating with QA, owning quality in your own code.
• Written and spoken English to a professional standard.

Requirements

• Comfortable moving between mobile security, SDKs, backend services, and delivery infrastructure.
• Experience with fraud management and extending mobile security beyond RASP/MTD.
• Server-side fraud engine experience including transaction intelligence and ML-based risk scoring.
• Experience defining the signal/risk-score contract between on-device and server layers.
• Familiarity with behavioral biometrics, transaction risk, and risk-adaptive authentication.
• Experience creating and delivering credible technical demonstrations and proof-of-concept environments.
• Familiarity with EU regulatory requirements such as PSD2 SCA, DORA, GDPR, PCI-DSS, and eIDAS 2.0 / EUDI Wallet.
• Experience in a security vendor or fintech/banking environment.

Benefits

• Opportunity to work in a fast-paced, innovative environment.
• Collaborative team culture with a focus on professional growth.
• Access to cutting-edge technology and tools.
• Flexible working arrangements.