8 days ago
China (city not specified)Senior
Responsibilities
- Design the overall security and privacy architecture for an AI-native phone.
- Define permission models, access boundaries, authentication, authorization, and access controls for AI agents and integrations.
- Secure AI access to sensitive data and system services including messages, contacts, calendars, notifications, camera, microphone, and location.
- Implement sandboxing, isolation, audit logging, activity tracking, encryption, secure storage, data retention, and deletion mechanisms.
- Identify and mitigate AI-specific risks including prompt injection, malicious applications, data exfiltration, and unauthorized tool execution.
- Review Android permission models, privileged system access, SELinux policies, and system-level security boundaries.
- Conduct security assessments, threat modeling, vulnerability assessment, and penetration testing.
- Collaborate with Android/AOSP, Agent Runtime, Context & Memory, and Applied ML teams.
Requirements
- Strong experience in mobile security, Android security, application security, or systems security.
- Deep understanding of Android security architecture, including application sandboxing, permissions, SELinux, Binder IPC, and privileged system services.
- Experience designing authentication, authorization, and access-control systems.
- Strong understanding of encryption, secure storage, key management, and data protection.
- Experience with security threat modeling, vulnerability assessment, and penetration testing.
- Understanding of privacy-by-design, data minimization, and user consent principles.
- Ability to work across Android platform, backend, and AI agent architectures.
- Preferred experience with AOSP security customization, Android platform security, system-level applications, or privileged Android services.
- Preferred experience with AI agent security, prompt injection, tool-use security, LLM data leakage, mobile device security, Trusted Execution Environments, hardware-backed keystores, secure boot, privacy engineering, or autonomous-agent permission systems.
Categories
About Bjak
Bjak builds an online insurance marketplace for consumers in Malaysia and Southeast Asia, enabling comparison and purchase of car, health, life, and travel policies. Its business model is aggregator-based, earning commissions and fees from insurers and partners while streamlining digital applications and renewals. Founded in 2019 and headquartered in Selangor, it is privately held and is expanding from insurance comparison into broader fintech services via a planned finance super app.