Our client is seeking an experienced Application / Product Security Engineer with deep expertise in securing thick-client applications across desktop and mobile environments. The ideal candidate has a strong foundation in secure architecture, modern authentication, cryptography, GenAI security, and OS-level protections, while partnering closely with engineering teams to embed security throughout the software development lifecycle.
Responsibilities :
- Secure desktop and mobile applications using modern client-security best practices.
- Develop and review secure architectures for thick clients, including local storage, IPC, JavaScript engines, and OS-level protections.
- Collaborate with engineering teams to embed security across the SDLC, including threat modeling, code reviews, and secure design patterns.
- Lead incident response and vulnerability remediation efforts for client applications.
- Perform static / dynamic analysis, fuzzing, penetration testing, and reverse engineering of client-side software.
- Implement secure authentication mechanisms (OAuth, WebAuthn, FIDO2) and session handling.
- Apply cryptographic best practices and certificate management across client components.
- Implement OS-level hardening techniques such as sandboxing, privilege separation, and secure API usage.
- Write clear, developer-focused security guidelines and communicate complex security concepts across teams.
Minimum Requirements :
5+ years of experience in application or product security, securing desktop and mobile applications.Expertise in thick-client architecture security, including local storage protection, IPC, OS-level security, and web security standards (CSP, same-origin policy, TLS / HTTPS).Hands-on knowledge of iOS, Android, Windows, macOS, and Linux application security models.Strong understanding of GenAI security, modern cryptography, certificate management, and secure authentication protocols.Experience with secure coding in at least one systems language (C++, Rust, Go) and one application language (Kotlin, Swift, C#).Familiarity with SAST / DAST tools, fuzzers, pen testing, and reverse engineering workflows.Experience with thick-client incident response and vulnerability mitigation.Strong written / verbal communication skills for cross-team collaboration and guideline creation.Required Qualifications :
Contributions to open-source client frameworks, SDKs, or security tooling.Experience with secure local storage, DRM, obfuscation, or anti-tampering technologies.Knowledge of offline-first app security challenges (caching, sync, persistence).Experience designing privacy-preserving client architectures with minimal telemetry.Deep familiarity with reverse engineering defenses (anti-debugging, integrity checks, obfuscation).Prior leadership securing a large-scale thick-client product launch.Advanced degree (MS / PhD) in Computer Science, Cybersecurity, or related field.If you meet the required qualifications and are interested in this role, please apply today.
The Solomon Page Distinction
Solomon Page offers a comprehensive benefit program for hourly employees. We pride ourselves on offering medical, dental, 401(k), direct deposit and commuter benefits to our employees, including freelancers - which sets us apart in the industries we serve.
About Solomon Page
Founded in 1990, Solomon Page is a specialty niche provider of staffing and executive search solutions across a wide array of functions and industries. The success of Solomon Page reflects an organic growth strategy supported by a highly entrepreneurial culture. Acting as a strategic partner to our clients and candidates, we focus on providing customized solutions and building long-term relationships based on trust, respect, and the consistent delivery of excellent results. For more information and additional opportunities, visit : solomonpage.com and connect with us on Facebook , and LinkedIn .
Opportunity Awaits.
#LI-NC5