Mobile Security Analyst (m/f/d) - Bug Bounty, Mobile Device Vulnerability Management, Threat Hunting

Fully-remote from Germany, as soon as possible

ABOUT US:

Common Codes is leading the development of Germany’s EUDI Wallet on behalf of the Federal Ministry for Digital Transformation and Government Modernisation. Our mission is to build secure, privacy-first and trustworthy digital public infrastructure. Together with partners from government, business, research and civil society, we are creating an open and interoperable ecosystem for digital credentials. The EUDI Wallet will enable public authorities and companies to offer new digital services, simplify processes and develop applications based on verifiable digital information. For citizens, it will provide a simple and secure way to identify themselves, store digital credentials and share only the information required in a specific situation. Whether opening a bank account, applying to a university or proving their age, users will remain in control of their personal data. By building this infrastructure, we are laying the foundation for a more accessible, efficient and trustworthy digital society. The EUDI Wallet will reduce bureaucratic barriers, make digital services easier to use and strengthen digital sovereignty in Germany and Europe

YOUR ROLE:

As Mobile Security Analyst (m/f/d), you will support three closely linked security functions: the bug bounty and vulnerability disclosure programs, threat hunting mobile security threats which ultimately will feed into our Mobile Device Vulnerability Management (MDVM) solution.

In the internal bug bounty team, you will support technical triage and in-depth security assessment of vulnerability reports with a strong focus on mobile applications (iOS/Android), however you may also assist the team with technical triage support for some web applications and APIs. These important steps help build a robust and effective MDVM - tracking, assessing and acting on vulnerabilities in the device’s operating system, hardware key stores and wallet app integrity that ensure the security of the German EUDI Wallet.

YOUR RESPONSIBILITIES:

Reproduce proof-of-concepts submitted through the bug bounty and the vulnerability disclosure program, and validate whether reported issues are exploitable in the relevant technical context.