Android Software Engineer – Mobile Security

About the role

Thales is looking for an experienced Android Software Engineer to join its Cyber‑Security Products team in Singapore. You will design and deliver secure mobile authentication applications and SDKs that protect identity and access management (IAM) workflows.

Key responsibilities

• Design, build, and validate Android apps and SDKs, using AI‑assisted tooling while ensuring human‑led security reviews.
• Implement protocol‑driven authentication and identity verification flows and validate them against platform threat models.
• Own the test strategy for SDKs, including unit, integration, and UI tests, and expand coverage with AI‑generated tests.
• Develop clean, well‑documented SDK APIs with backward compatibility and minimal binary size impact.
• Improve the software development lifecycle by integrating AI for test generation, code review support, debugging, and release automation.
• Maintain CI/CD pipelines (Jenkins, GitLab CI) with static analysis, dependency scanning, and automated security checks, using AI to triage issues.
• Evaluate AI/ML tools for IAM security and data‑handling compliance, sharing best practices across the team.
• Add privacy‑conscious telemetry for crash, performance, and diagnostics without exposing sensitive identity data.
• Contribute to product innovation, including prototypes, patents, and AI/ML opportunities that enhance security and reduce user friction.

Required profile

• Degree in Computer Engineering, Information Security, Electronics or a related field.
• At least 5 years of professional mobile development experience on Android.
• Proven ability to use AI‑assisted development tools (e.g., Copilot, Claude, Cursor) and critically validate generated code for security‑sensitive contexts.

Required skills

• Android development with Java and Kotlin.
• Understanding of Android lifecycle, concurrency, and memory management.
• AI‑assisted development tools (GitHub Copilot, Claude, Cursor) and prompt engineering.
• CI/CD pipelines using Jenkins or GitLab CI.
• Static Application Security Testing (SAST) and dependency scanning.
• Unit, integration, and UI testing for SDKs.
• Design of secure authentication and identity verification protocols.
• Privacy‑focused telemetry implementation.