8 days ago
India (city not specified)Senior
Responsibilities
- Design the overall security and privacy architecture for the AI-native phone.
- Define permission models, access boundaries, authentication, authorization, and access controls for AI agents, tools, and application integrations.
- Secure AI access to sensitive user data and device capabilities, including messages, contacts, calendars, notifications, camera, microphone, and location.
- Implement sandboxing, isolation, audit logging, activity tracking, secure storage, encryption, data retention, and deletion mechanisms.
- Identify and mitigate AI-specific risks such as prompt injection, malicious applications, data exfiltration, and unauthorized tool execution.
- Review Android permission models, privileged system access, SELinux policies, and system-level security boundaries.
- Conduct security assessments, threat modeling, vulnerability assessments, and penetration testing for system-level AI capabilities.
- Collaborate across Android/AOSP, Agent Runtime, Context & Memory, and Applied ML teams.
Requirements
- Strong experience in mobile security, Android security, application security, or systems security.
- Deep understanding of Android security architecture, including application sandboxing, permissions, SELinux, Binder IPC, and privileged system services.
- Experience designing authentication, authorization, and access-control systems.
- Strong understanding of encryption, secure storage, key management, and data protection.
- Experience with security threat modeling, vulnerability assessment, and penetration testing.
- Understanding of privacy-by-design principles, data minimization, and user consent.
- Ability to work across Android platform, backend, and AI agent architectures.
- Preferred experience with AOSP security customization, Android platform security, system-level applications, or privileged Android services.
- Preferred experience with AI agent security, prompt injection, tool-use security, LLM data leakage, mobile device security, Trusted Execution Environment, hardware-backed keystores, secure boot, privacy engineering, or permission and approval systems for autonomous agents.
Categories
About Bjak
Bjak builds an online insurance marketplace for consumers in Malaysia and Southeast Asia, enabling comparison and purchase of car, health, life, and travel policies. Its business model is aggregator-based, earning commissions and fees from insurers and partners while streamlining digital applications and renewals. Founded in 2019 and headquartered in Selangor, it is privately held and is expanding from insurance comparison into broader fintech services via a planned finance super app.