About Company
Telstra is Australia’s leading telecommunications and technology company, connecting millions of customers to essential services and innovative solutions. We are at the forefront of building world-class networks, delivering cutting-edge digital experiences, and driving technological advancements that shape Australia’s future. Our mission is to create a brilliant connected future for everyone, which critically depends on maintaining the highest standards of security and privacy for our vast array of mobile applications and platforms. We foster a diverse, inclusive, and dynamic work environment where creativity and problem-solving are encouraged, and employees are empowered to grow their careers and make a significant impact. Join Telstra and be part of a team that is not only transforming telecommunications but also safeguarding the digital lives of Australians.
Advertisement
Job Description
As a Mobile Security Engineer at Telstra, you will be a pivotal member of our cybersecurity team, dedicated to fortifying the security posture of our extensive suite of mobile applications. In this dynamic and challenging role, you will be instrumental in identifying, assessing, and mitigating security vulnerabilities across our iOS and Android platforms, ensuring the highest level of protection for our millions of customers. You will work within the entire Software Development Lifecycle (SDLC), from initial design and threat modeling through to deployment and ongoing maintenance, embedding security best practices at every stage. Your expertise will be crucial in conducting rigorous security assessments, performing penetration testing, and implementing automated security controls to proactively defend against emerging threats.
This role requires a proactive and collaborative individual who can engage effectively with various engineering, product, and operations teams to champion security-by-design principles. You will be responsible for developing secure coding guidelines, delivering security training, and driving a culture of security awareness amongst mobile development teams. We are looking for someone with a deep technical understanding of mobile operating systems, application architectures, cryptographic mechanisms, and common attack vectors targeting mobile devices. You will leverage cutting-edge tools and methodologies to perform source code reviews, static and dynamic analysis, and runtime manipulation to uncover and address complex security flaws. Your contributions will directly impact the trustworthiness and resilience of Telstra’s mobile ecosystem, safeguarding customer data and maintaining their confidence in our services. If you are passionate about mobile security and thrive in an environment where your skills can make a significant difference on a national scale, we encourage you to apply.
Key Responsibilities
- Conduct comprehensive security assessments, penetration testing, and vulnerability analysis on iOS and Android applications.
- Identify, reproduce, and document security vulnerabilities, providing clear, actionable remediation advice and working with development teams to implement solutions.
- Collaborate with mobile development and DevOps teams to integrate security into the CI/CD pipeline and enforce secure coding practices.
- Perform threat modeling for new mobile features, services, and applications to proactively identify potential risks.
- Research, develop, and implement advanced security controls and tools tailored for mobile environments.
- Stay abreast of the latest mobile security threats, vulnerabilities, exploitation techniques, and industry best practices.
- Actively participate in security incident response activities related to mobile platforms, including investigation and post-mortem analysis.
- Conduct source code reviews for security flaws and utilize static (SAST) and dynamic (DAST) application security testing tools.
- Contribute to the continuous improvement of Telstra's mobile security architecture, policies, and standards.
- Provide expert security guidance, mentorship, and training to development teams on mobile security best practices and emerging threats.
Required Skills
- Proven experience (4+ years) in mobile application security for both iOS and Android platforms.
- Strong understanding of mobile operating system security models, sandboxing, and inter-process communication.
- In-depth knowledge of common mobile vulnerabilities (e.g., OWASP Mobile Top 10) and mitigation strategies.
- Proficiency with mobile security tools and frameworks (e.g., MobSF, Frida, Objection, Burp Suite Mobile Assistant, Wireshark).
- Solid programming experience in at least one relevant language (e.g., Swift/Objective-C, Kotlin/Java, Python) for security analysis and tool development.
- Familiarity with secure Software Development Lifecycle (SDLC) principles and integrating security into CI/CD pipelines.
- Strong understanding of cryptographic principles, secure key management, and data protection in mobile contexts.
- Knowledge of network protocols, API security, and web security vulnerabilities as they relate to mobile applications.
- Experience with static and dynamic application security testing (SAST/DAST) methodologies and tools.
- Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security issues to diverse audiences.
Preferred Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
- Relevant industry certifications such as OSCP, OSWE, CSSLP, GCIH, CEH, or other specialized mobile security certifications.
- Experience with cloud security (AWS, Azure, GCP) specifically concerning mobile backend services and APIs.
- Familiarity with reverse engineering mobile applications and obfuscation techniques.
- Experience with Mobile Device Management (MDM) or Enterprise Mobility Management (EMM) solutions.
- Prior experience working in a large-scale enterprise or telecommunications environment.
Perks & Benefits
- Competitive salary package with performance-based incentives.
- Flexible hybrid working arrangements to support work-life balance.
- Access to cutting-edge technology and involvement in innovative, large-scale projects.
- Comprehensive health, wellness, and employee assistance programs.
- Generous leave policies, including paid parental leave and personal leave.
- Extensive opportunities for professional development, training, and industry certifications.
- Employee discounts on Telstra products and services.
- A supportive, inclusive, and diverse work environment with a strong focus on collaboration.
- Modern office facilities located in a vibrant Sydney CBD location.
How to Apply
Interested candidates are invited to submit their detailed resume and a compelling cover letter, highlighting their relevant experience in mobile security and explaining why they are an ideal fit for Telstra’s Mobile Security team. Please click on the application link below to apply directly through our official careers portal.
Advertisement
