Description review
AI Phone - Security & Privacy Engineer
Bjak · Remote - United States · back to the listing
HR standards
65/100
needs work
Title ↔ description
77/100
solid
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 25 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
About
We are reimagining the phone. AI phones need to be proactive, intuitive, intelligent and low cost. This is a mission critical for rest of the world to adopt intelligence.
There are over 5 billion people using everyday applications such as email, messaging, notes, tasks, and calendars, yet most are not AI-native. Our mission is to build proactive applications and devices that bring intelligence into daily conversations, coordination and workflows, with minimal prompting.
Focus: Designing and implementing the security and privacy architecture for the AI-native phone, ensuring AI agents can safely access user data, interact with applications, and execute actions across the operating system.
Unlike conventional mobile application security, this role needs to consider the additional risks introduced by AI agents having access to personal context, system services, and application-level actions.
Responsibilities
• Design the overall security and privacy architecture for the AI-native phone.
• Define permission models and access boundaries for AI agents interacting with user data and system services.
• Design secure mechanisms for AI access to messages, contacts, calendars, notifications, camera, microphone, location and other sensitive information.
• Implement appropriate sandboxing and isolation for agent execution.
• Define authentication, authorization and access-control mechanisms for AI tools and application integrations.
• Ensure users have control over what information AI can access and what actions it can execute.
• Implement audit logging and user-visible activity tracking for AI access and actions.
• Design secure storage, encryption, data retention and deletion mechanisms for personal data and memory.
• Identify and mitigate AI-specific security risks, including prompt injection, malicious applications, data exfiltration and unauthorized tool execution.
• Review Android permission models, privileged system access, SELinux policies and system-level security boundaries.
• Work closely with Android/AOSP, Agent Runtime, Context & Memory and Applied ML teams to ensure security is built into the architecture rather than added later.
• Conduct security assessments, threat modeling and penetration testing for system-level AI capabilities.
Requirements
• Strong experience in mobile security, Android security, application security or systems security.
• Deep understanding of Android security architecture, including application sandboxing, permissions, SELinux, Binder IPC and privileged system services.
• Experience designing authentication, authorization and access-control systems.
• Strong understanding of encryption, secure storage, key management and data protection.
• Experience with security threat modeling, vulnerability assessment and penetration testing.
• Understanding of privacy-by-design principles, data minimization and user consent.
• Ability to work across Android platform, backend and AI agent architectures.
Nice to have
• Experience with AOSP security customization or Android platform security.
• Experience securing system-level applications or privileged Android services.
• Experience with AI agent security, prompt injection, tool-use security and LLM data leakage.
• Experience with mobile device security, Trusted Execution Environment (TEE), hardware-backed keystores and secure boot.
• Experience with privacy engineering for products handling sensitive personal information.
• Experience building permission and approval systems for autonomous agents.
We are reimagining the phone. AI phones need to be proactive, intuitive, intelligent and low cost. This is a mission critical for rest of the world to adopt intelligence.
There are over 5 billion people using everyday applications such as email, messaging, notes, tasks, and calendars, yet most are not AI-native. Our mission is to build proactive applications and devices that bring intelligence into daily conversations, coordination and workflows, with minimal prompting.
Focus: Designing and implementing the security and privacy architecture for the AI-native phone, ensuring AI agents can safely access user data, interact with applications, and execute actions across the operating system.
Unlike conventional mobile application security, this role needs to consider the additional risks introduced by AI agents having access to personal context, system services, and application-level actions.
Responsibilities
• Design the overall security and privacy architecture for the AI-native phone.
• Define permission models and access boundaries for AI agents interacting with user data and system services.
• Design secure mechanisms for AI access to messages, contacts, calendars, notifications, camera, microphone, location and other sensitive information.
• Implement appropriate sandboxing and isolation for agent execution.
• Define authentication, authorization and access-control mechanisms for AI tools and application integrations.
• Ensure users have control over what information AI can access and what actions it can execute.
• Implement audit logging and user-visible activity tracking for AI access and actions.
• Design secure storage, encryption, data retention and deletion mechanisms for personal data and memory.
• Identify and mitigate AI-specific security risks, including prompt injection, malicious applications, data exfiltration and unauthorized tool execution.
• Review Android permission models, privileged system access, SELinux policies and system-level security boundaries.
• Work closely with Android/AOSP, Agent Runtime, Context & Memory and Applied ML teams to ensure security is built into the architecture rather than added later.
• Conduct security assessments, threat modeling and penetration testing for system-level AI capabilities.
Requirements
• Strong experience in mobile security, Android security, application security or systems security.
• Deep understanding of Android security architecture, including application sandboxing, permissions, SELinux, Binder IPC and privileged system services.
• Experience designing authentication, authorization and access-control systems.
• Strong understanding of encryption, secure storage, key management and data protection.
• Experience with security threat modeling, vulnerability assessment and penetration testing.
• Understanding of privacy-by-design principles, data minimization and user consent.
• Ability to work across Android platform, backend and AI agent architectures.
Nice to have
• Experience with AOSP security customization or Android platform security.
• Experience securing system-level applications or privileged Android services.
• Experience with AI agent security, prompt injection, tool-use security and LLM data leakage.
• Experience with mobile device security, Trusted Execution Environment (TEE), hardware-backed keystores and secure boot.
• Experience with privacy engineering for products handling sensitive personal information.
• Experience building permission and approval systems for autonomous agents.