About the Role:
Project Meridian is seeking experienced native iOS or Android engineers to build AI agents that autonomously identify, analyze, and remediate security vulnerabilities in native mobile codebases.
You will combine deep mobile engineering expertise with AI-assisted development and application security to build agents that understand large codebases, investigate security findings, generate code fixes, and validate those fixes. The role includes establishing review and approval controls so automated changes meet security, quality, and functional requirements.
Key Responsibilities
• Design and develop AI agents for vulnerability discovery, triage, root-cause analysis, and remediation across native mobile applications.
• Build workflows that inspect source code, dependencies, platform configurations, and data flows to identify security weaknesses.
• Enable agents to detect issues such as insecure data storage, sensitive information exposure, weak cryptography, insecure network communication, and authentication or authorization flaws.
• Integrate security scanning tools and their findings into agent workflows to improve detection accuracy and reduce false positives.
• Enable agents to generate targeted fixes, create regression tests, run builds and security checks, and prepare pull requests with supporting evidence.
• Collaborate with application security, architecture, mobile engineering, and QE teams to validate and improve agent behavior.
Required Qualifications
• 10+ years of software engineering experience, with substantial hands-on experience developing and maintaining native iOS or Android applications.
• Deep expertise in at least one platform: o iOS: Swift, Objective-C, Xcode, SwiftUI/UIKit, and native application architecture.
o Android: Kotlin, Java, Android Studio, Jetpack Compose/Views, Gradle, and native application architecture.
• Strong understanding of mobile security, secure coding, authentication, encryption, secure storage, and network security.
• Hands-on experience building LLM-powered agents or automations that use tools, repository context, and multistep workflows.
• Familiarity with static application security testing, dependency scanning, and interpreting security findings.