Senior Android Platform Security Engineer

<strong>Job Requirements </strong><br><p>At Quest Global, it’s not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.</p><p> </p><p><span style="color:black;"><strong>About the Job</strong></span></p><p><span style="color:black;">As a Senior Software Engineer on the Android Platform Security team, you will architect, design, develop, and validate critical hardware-backed security modules that protect billions of Android devices worldwide. You will work across the entire Android security stack—from Java framework APIs and Rust/C++ system daemons (keystore2) down to AIDL Hardware Abstraction Layers (HALs), Trusted Execution Environments (Trusty OS), and Secure Elements (JavaCard / StrongBox).</span></p><p><span style="color:black;"> In this role, you will lead complex features involving cryptographic key management, hardware attestation, Remote Key Provisioning (RKP), and compliance verification through CTS and VTS suites.</span></p><p><span style="color:black;"> <strong>Key Responsibilities</strong></span></p><ul><li><strong>Design & Development</strong>: Architect, develop, and maintain core Android security components including Android Keystore, KeyMint (and StrongBox KeyMint), Trusty OS Trusted Applications (TAs), and JavaCard applets for Secure Elements (eSE).</li><li><strong>HAL & IPC Integration</strong>: Define, implement, and evolve AIDL-based HALs and Binder IPC interfaces connecting the Android OS framework with underlying TEE and Secure Element hardware.</li><li><strong>Cryptography & PKI</strong>: Implement and review cryptographic protocols, hardware-backed key generation, key attestation, X.509 certificate chain validation, and secure storage mechanisms.</li><li><strong>Testing & Compliance</strong>: Author, maintain, and debug CTS (Compatibility Test Suite) and VTS (Vendor Test Suite) tests to ensure ecosystem-wide security compliance and robustness across SoC vendors and OEMs.</li><li><strong>Cross-Stack Debugging:</strong> Triage, root-cause, and resolve complex functional, performance, and security issues spanning Java framework services, native C++/Rust system daemons, kernel drivers, TEEs, and Secure Elements.</li><li><strong>Technical Leadership</strong>: Provide technical mentorship, drive security design reviews, Threat Modeling, and code reviews in C++, Rust, and Java, ensuring adherence to memory safety and secure coding best practices.</li></ul><p><span style="color:black;"> </span></p><p><span style="color:black;"><strong>Minimum Qualifications</strong></span></p><ul><li><strong>Education</strong>: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.</li><li><strong>Experience</strong>: 7+ years of hands-on software engineering experience in embedded systems, OS internals, or mobile platform security.</li><li><strong>Programming Languages</strong>: Strong proficiency in C++, Rust, and Java (including JavaCard for Secure Element applet development where applicable).</li><li><strong>Android Security Core</strong>: Deep hands-on experience with Android Keystore, KeyMint (or Keymaster), Trusty OS (or equivalent TEEs like OP-TEE/QTEE), and Secure Elements (eSE / StrongBox).</li><li><strong>Interfaces</strong>: Proven experience developing and integrating Android HALs using AIDL (and HIDL) and Binder IPC.</li><li><strong>Cryptography</strong>: Solid foundation in applied cryptography (AES, RSA, ECC/ECDSA/ECDH, SHA/HMAC, KDFs), PKI, X.509 certificates, and hardware key attestation.</li><li><strong>Validation</strong>: Hands-on experience developing, executing, and debugging Android CTS and VTS test suites.</li></ul><p><span style="color:black;"> </span></p><p><span style="color:black;"><strong>Preferred Qualifications</strong></span></p><ul><li>Experience with <strong>Rust in AOSP</strong> (e.g., keystore2, KeyMint Rust reference implementation, or Trusty Rust TAs).</li><li>Experience with <strong>JavaCard</strong> applet development, GlobalPlatform specifications, APDU command protocols, and OMAPI.</li><li>Knowledge of <strong>Remote Key Provisioning (RKP)</strong>, CBOR/COSE data structures, DICE (Device Identifier Composition Engine), or Android Virtualization Framework (AVF / pKVM).</li><li>Familiarity with side-channel mitigation, fuzz testing (libFuzzer), static/dynamic analysis tools, and hardware security certification standards.</li><li>Track record of contributing to the Android Open Source Project (AOSP) and collaborating with SoC vendors, OEMs, or Secure Element vendors.</li></ul><p> </p><p>We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.</p><p> </p><p>We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.</p><br><br>