Senior Security Engineer, Mobile Device Detection

This opportunity would be with Tools for Humanity.

About the Orb

World's launch requires a "Proof-of-Personhood": a way to determine someone is human (not a bot) and hasn't already claimed their free share of Worldcoin. This is why we developed the Orb .

The Orb is an advanced biometric imaging device, custom-designed for Worldcoin's launch. Orbs are deployed to a global network of operators, who use the device to onboard new World users. During this onboarding, the Orb generates an encoding of each user's iris and submits it to World's backend. For more details on how the Orb is part of World's privacy-preserving approach to Proof-of-Personhood, see the World whitepaper .

The Orb solves a fierce combination of engineering and UX challenges, centered around image quality, security, and ease-of-use. Each device has an advanced iris imaging system, designed to work consistently across real-world lighting conditions. An additional suite of sensors feeds into an onboard fraud detection system, enabling use in insecure environments. These systems are combined in a sleek industrial design with a simple, minimalist user interface.

About the Team:

Our multidisciplinary team’s mission is to detect & respond to attacks against the global-scale identity World ID service , which leverages a unique hardware device (the Orb ), cloud-hosted APIs, mobile apps, and operations on the Ethereum blockchain to provide privacy-preserving “proof of human ”. Together, we apply expertise in hardware, cloud infrastructure, application security, mobile devices, intrusion detection, machine learning/AI, blockchain, incident response, and more to solve these novel challenges.

This team will be working closely with the teams building the core technologies (apps, orbs, network protocols, encryption designs, attestation, etc) because D&R and Privacy are foundational elements of the World Network.

About the Role:

You will work with our team of security experts to leverage a variety of logs and security events from cloud deployed applications (especially in AWS) to detect and respond to intrusion activity and attacks on cloud-deployed APIs as part of the global-scale World ID identity service.

About You

• 5-8 years experience designing and delivering security detection to detect tampering, jailbreaking or other attacks against Android or iOS-based hardware devices.

• Experience analyzing sensor data (e.g. accelerometer, temperature, imaging) to create security-relevant detection techniques.

• Willing to participate in an oncall rotation and learn incident handling (or relevant experience)

• Strong critical thinking, communication, and leadership skills

• Comfort working cross-functionally with peer teams to negotiate and reach consensus solutions that improve security and privacy

• Energized by working in a fast-paced, collaborative environment

• If you don't think you meet all of the criteria but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team.

Nice-to-Have Skills

• Deep understanding of mobile device security components and features (TPM, SE, secure boot, etc.) and attacks against them

By submitting your application, you consent to the processing and internal sharing of your CV within the company, in compliance with the GDPR.

Pay transparency statement (for CA and NY based roles):

The reasonably estimated salary for this role at TFH ranges from $272,000-$320,000 plus a competitive long term incentive package. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, TFH offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, vision, 401(k) plan and match, life insurance, flexible time off, commuter benefits, professional development stipend and much more!