Mobile Security Technician

About the role

Sun King is hiring a Mobile Security Technician in Westlands, Nairobi. The role focuses on offensive security assessments of hardware, firmware, embedded operating systems and payment stacks on Sun King mobile devices, working with product, hardware and software engineering teams to strengthen product resilience.

Key responsibilities

• Conduct offensive security assessments of hardware, firmware, embedded OS and payment stacks on Sun King mobile devices.
• Reverse engineer firmware and perform static and dynamic reviews to find security weaknesses.
• Detect and exploit vulnerabilities in embedded systems, bootloaders, MDMs, Android kernel components, secure boot and cryptographic mechanisms.
• Develop and run proof-of-concept attacks to show exploitability and business impact.
• Work with product, hardware and software teams to define secure development practices.
• Contribute to threat modeling and architecture reviews for new products and features.
• Stay up to date with emerging vulnerabilities, tools and offensive research relevant to smartphone financing ecosystems.

Required profile

• Solid knowledge of Android security, MDM, IoT device architectures and hardware security testing.
• Familiarity with hardware exploitation techniques such as JTAG/SWD/UART debugging, side-channel and fault injection.
• Experience reviewing and modifying firmware images.
• Knowledge of common vulnerability classes (memory corruption, design flaws, insecure updates).
• Exposure to payment/fintech device security and secure device provisioning environments.

Required skills

• Tools: Flash 64, Pandora, Easy JTag, Chimera, CM2; reverse engineering tools such as Ghidra, IDA Pro, Binary Ninja; debuggers such as JTAGulator, OpenOCD, Bus Pirate.
• Programming and scripting in Python, C/C++ or Bash.
• Familiarity with secure boot, TPM/TEE and flash encryption.