Skilled Trades · Full-time
Direct employerMobile Security Technician.

Published by employer
About this role
This plain-English summary was prepared by work.ke from the original advert. Confirm all details on the source before applying.
Role overview
Sun King is hiring a Mobile Security Technician to join their Cyber Security Team in Nairobi, Kenya. This role is suited for candidates with expertise in mobile device security and ethical hacking, focusing on identifying and addressing vulnerabilities in smartphones and related devices.
Read full role
What you will do
- Conduct security assessments on hardware, firmware, embedded operating systems, and payment systems of Sun King mobile devices.
- Reverse engineer firmware and perform both static and dynamic analyses to find security weaknesses.
- Identify and exploit vulnerabilities in embedded systems, bootloaders, mobile device management systems, Android kernel components, secure boot processes, and cryptographic functions.
- Create and implement proof-of-concept attacks to demonstrate potential exploits and their impact on business.
- Collaborate with product, hardware, and software engineering teams to establish secure development practices and enhance product security.
- Participate in threat modeling and architecture evaluations for new products and features.
- Stay updated on new vulnerabilities, tools, and offensive research related to smartphone financing ecosystems.
Requirements
- Strong understanding of Android security, Mobile Device Management, IoT device structures, and hardware security testing.
- Experience with hardware exploitation methods such as JTAG, SWD, UART debugging, side-channel attacks, and fault injection.
- Practical knowledge of tools like Flash 64, Pandora, Easy JTag, Chimera, CM2, or similar.
- Skilled in using reverse engineering software (e.g., Ghidra, IDA Pro, Binary Ninja) and debugging equipment (e.g., JTAGulator, OpenOCD, Bus Pirate).
- Experience in analysing and modifying firmware images using tools like binwalk, Firmadyne, or QEMU.
- Familiarity with embedded security technologies including secure boot, TPM/TEE, and flash encryption.
- Programming and scripting skills in languages such as Python, C/C++, or Bash.
- Understanding of common vulnerability types like memory corruption, design flaws, and insecure update mechanisms.
- Exposure to security in payment or fintech devices and secure device provisioning environments.
Benefits
The employer offers opportunities for professional growth in a dynamic and socially impactful industry, a collaborative and diverse work culture, multicultural experiences, and structured learning and development programs through the Sun Center for Leadership.
How to apply
Apply through the employer's official contact with your application. The employer has not published a closing date.