ABOUT THE PROJECT

MWDN is a global IT outstaffing company with 23+ years of experience that connects exceptional tech talent with leading companies across Israel, the USA, Great Britain, and Western Europe. We offer opportunities to work on international products in a stable and professional environment. Our client is working on Identity and Access Management (IAM) software and is revolutionizing the way enterprises protect user identities in a passwordless world.

REQUIREMENTS

– 3+ years of hands-on experience in security research, mobile security, browser research, fraud research, detection research, reverse engineering, or a related technical role.
– Experience with web browsers, mobile browsers, WebViews, browser APIs, JavaScript runtime behavior, browser automation, fingerprinting, client-side web security, and low-level browser technologies.
– Familiarity with the architecture or codebase of modern open-source browsers and rendering engines, such as Chromium, WebKit, Blink, or Gecko.
– Experience with native Android and/or iOS applications, mobile OS behavior, app instrumentation, emulators, device spoofing, mobile automation, mobile security, and low-level platform APIs.
– Attacker mindset and practical understanding of how malicious actors attempt to bypass detection using automation, AI agents, spoofing, and anti-detection techniques.
– Ability to identify subtle technical signals and turn them into practical detection or data collection opportunities.
– Experience designing technical experiments and validating research hypotheses.
– Experience with one or more SDK development languages and environments, such as TypeScript/JavaScript for web, Kotlin/Java for Android, or Swift/Objective-C for iOS.
– Scripting ability, preferably in Python, for building research tools, automation, and analysis workflows.
– Ability to work independently on ambiguous problems and communicate findings clearly to engineering, product, and research stakeholders.

RESPONSIBILITIES

– Research browser, WebView, Android, and iOS environments from an attacker’s perspective.
– Identify new security signals, behavioral indicators, and technical patterns that can improve fraud, abuse, automation, and AI agent detection.
– Investigate attacker techniques involving bots, browser automation, AI agents, emulators, device spoofing, hooking, instrumentation, remote access tools, and anti-detection methods.
– Design and run experiments to compare legitimate, automated, AI-assisted, and manipulated environments.
– Evaluate proposed signals for reliability, stability, spoofability, privacy sensitivity, performance impact, and production feasibility.
– Translate research findings into clear SDK feature requirements for web and mobile data collection.
– Build internal tools, scripts, and lab environments to support signal research and validation.
– Collaborate with SDK, engineering, product, and detection teams to move research from hypothesis to production.

WHAT WE OFFER

– People-first management with minimal bureaucracy.
– A friendly company culture, proven by employees who choose to return.
– Flexible working hours.
– Full financial and legal support for independent contractors.
– Free English classes, with native speakers or Ukrainian teachers.
– Dedicated HR support.

COMPENSATION & BENEFITS

– Competitive salary and benefits package.