Sun King

Off-grid solar home systems provider

Mobile Security Technician

Offensive Security & TestingUpdated on Nov 13

Full-timeNairobi, KenyaNo salary listedIn-person

About the Job

Requirements

Solid knowledge of Android security, Mobile Device Management, Internet of Things device architectures, and hardware security testing.
Strong familiarity with hardware exploitation techniques, including JTAG/SWD/UART debugging, side-channel techniques, and fault injection.
Hands-on experience with Flash 64, Pandora, Easy JTag, Chimera, CM2, and similar tools.
Proficiency in reverse engineering tools such as Ghidra, IDA Pro, and Binary Ninja, and debugging tools such as JTAGulator, OpenOCD, or Bus Pirate.
Experience reviewing and modifying firmware images using binwalk, Firmadyne, or QEMU.
Familiarity with secure boot, TPM/TEE, flash encryption, and other embedded security technologies.
Programming and scripting capability in Python, C/C++, Bash, or similar languages.
Knowledge of common vulnerability classes, including memory corruption, design flaws, and insecure update mechanisms.
Exposure to payment/fintech device security and secure device provisioning environments.

Responsibilities

Conduct offensive security assessments of hardware, firmware, embedded operating systems, and payment stacks on Sun King mobile devices.
Reverse engineer firmware and perform static and dynamic reviews to uncover security weaknesses.
Detect and exploit vulnerabilities in embedded systems, bootloaders, Mobile Device Management systems, Android kernel components, secure boot implementations, and cryptographic mechanisms.
Develop and execute proof-of-concept attacks to demonstrate exploitability and business impact.
Work with product, hardware, and software engineering teams to define secure development practices and strengthen product resilience.
Contribute to threat modeling and architecture reviews for new products and features.
Keep current with emerging vulnerabilities, tools, and offensive research relevant to smartphone financing ecosystems.
Test Sun King devices for security flaws, particularly mobile phones; conduct hardware vulnerability reviews of smartphones, Internet of Things and automotive devices; develop custom proof-of-concept code; and carry out internal penetration testing across products.

Location: Nairobi, Kenya

About The Role

We are looking for a Mobile Security Technician to join our Cyber Security Team, which provides intelligence on hacking of Sun King devices to strengthen and expand the digital and financial inclusion of our customers.

As an ethical hacker, your principal mission will be to identify security loopholes in various vendor smartphones and advise on security considerations. You will test Sun King devices for security flaws, particularly mobile phones, conduct hardware vulnerability reviews of smartphones, IoT and automotive devices, develop custom Proof-of-Concept code, and carry out internal penetration testing across products.

Conduct offensive security assessments of hardware, firmware, embedded operating systems, and payment stacks on Sun King mobile devices.
Reverse engineer firmware and perform static and dynamic reviews to uncover security weaknesses.
Detect and exploit vulnerabilities in embedded systems, bootloaders, MDMs, Android kernel components, secure boot implementations, and cryptographic mechanisms.
Develop and execute proof-of-concept attacks to demonstrate exploitability and business impact.
Work with product, hardware, and software engineering teams to define secure development practices and strengthen product resilience.
Contribute to threat modeling and architecture reviews for new products and features.
Keep current with emerging vulnerabilities, tools, and offensive research relevant to smartphone financing ecosystems.

Solid knowledge of Android security, Mobile Device Management, IoT device architectures, and hardware security testing.
Strong familiarity with hardware exploitation techniques (e.g., JTAG/SWD/UART debugging, side-channel techniques, fault injection).
Hands-on experience with Flash 64, Pandora, Easy JTag, Chimera, CM2, and similar tools.
Proficiency in reverse engineering tools such as Ghidra, IDA Pro, Binary Ninja, and debugging tools like JTAGulator, OpenOCD, or Bus Pirate.
Experience reviewing and modifying firmware images (binwalk, Firmadyne, QEMU).
Familiarity with secure boot, TPM/TEE, flash encryption, and other embedded security technologies.
Programming and scripting capability in Python, C/C++, Bash, or similar languages.
Knowledge of common vulnerability classes (e.g., memory corruption, design flaws, insecure update mechanisms).
Exposure to payment/fintech device security and secure device provisioning environments.

About the Company

Sun King

Off-grid solar home systems provider

Sun King designs, manufactures, distributes, and finances solar home energy products for off-grid communities in Africa and Asia. Its range includes solar lanterns and solar home systems with inverters and storage that can power lights, radios, phones, and household appliances, all financed through a pay-as-you-go model with small mobile money installments after a low upfront payment. The company differentiates itself with an end-to-end approach—handling product design, manufacturing, distribution, and financing—supported by a large field-agent network and strategic acquisitions like PayGo Energy to expand into clean cooking. Its goal is to increase energy access by helping households leapfrog kerosene and unreliable grids, aiming to reach millions of homes and businesses, including over 2 million in Ethiopia by 2030.

Company size: 1,001-5,000
Company stage: Debt Financing
Total funding: $864.9M
Headquarters: Chicago, IL
Founded: 2008

Recently Posted Jobs

Explore more opportunities at Sun King

See more jobs