Senior Security Engineer, Mobile Detection

Location

San Francisco

Full time

On-site

Security

World is building a real human network designed to accelerate people in the age of AI. As bots and autonomous agents reshape the internet, people, institutions, and applications need a trusted way to confirm who is a real human while preserving privacy. Our products make this possible: the Orb verifies real people, World s it privately, and World App enables and distributes the new applications made possible by this technology.

Together, they form a new layer for AI internet.

We’re one of the fastest-growing networks in tech. More than 17 million people across 160 countries have verified with World , and we complete over 350,000 verifications each week. World App is already among the most used wallets globally. Developers are integrating World  build safer online experiences and create spaces where real people can participate, earn, and be recognized in ways AI simply can’t replicate.

World was founded in 2019 and launched globally in 2023. We are more than 400 people across hardware, software, AI, cryptography, mobile engineering, and global operations. Our teams come from OpenAI, Tesla, Space

X, Apple, Google, Stripe, Meta, Coinbase, Palantir and MIT Media Lab. We’re backed by leading investors, including a16z, Khosla Ventures, Bain Capital Crypto, Blockchain Capital, Variant, Tiger Global, and Coinbase Ventures, as well as prominent operators and founders across fintech and AI.

World has been featured on the cover of TIME Magazine, highlighted in Fast Company’s Next 5 in Fintech, and explored in a Bloomberg deep dive. The New York Times, Bankless and Tech Crunch have all recognized our progress in identity, cryptography, AI, and global-scale hardware deployment. Our leadership is also named to the Time AI 100. Learn more about the newest product launches from our Unwrapped event.

This opportunity is with Tools for Humanity.

Our multidisciplinary team’s mission is to detect & respond to attacks against the global-scale identity World , which leverages mobile apps (Android and iOS), a unique hardware device (the Orb), cloud-hosted APIs, and operations on the (Ethereum-based) Worldchain blockchain to provide privacy-preserving “proof of human”. Together, we apply expertise in mobile devices, hardware, cloud infrastructure, application security, intrusion detection, machine learning/AI, blockchain, incident response, and more to solve these novel challenges.

We are building an entirely new automated detection and response system. Right now it needs to protect the 17 million+ verified World  processing millions of identity and financial transactions a day, and it will need to rapidly scale to protect billions of users using trusted and untrusted hardware, much of which we will not own. We will publish audit events to the public blockchain for the highest possible transparency and trust of the World m, and build decentralized detection & response using those logs.

We need to do all this while maintaining the strongest possible privacy protections.

This team works closely with the teams building the core technologies, because D&R and Privacy are foundational elements of the World Network.

We have a variety of mobile resources that need security controls and detection: apps for users to signup at an Orb and manage their currency wallets, apps for Orb operators to manage their devices and team, and a future Android-based device as a successor to the Orb.

Our user app also contains a “Mini App” ecosystem that includes 3rd party developers, and is intimately tied to both the digital identity (World

ID) and blockchain transactions.

You will work with our App engineering teams to address app and Mini App risks. You will also work with the Device and Device Security teams on securing the Android operating system of the next-generation Orb device.

Some travel (10-20% maximum) is expected, especially to our office in Munich, Germany where most of the Orb hardware and software teams are located.

5-8 years experience in offensive and defensive Android security. This is…