{"id":696135,"url":"https://alion.io/job/mrbeastyoutube-staff-embedded-mobile-product-security-engineer","title":"Staff Mobile & Product Security Engineer","company":{"id":678220,"name":"MrBeast","domain":"mrbeastyoutube.com","url":"https://alion.io/company/mrbeastyoutube","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":70,"ghost_share":0.1,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":81,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":139000,"max_usd":296000,"period":"year","method":"global_role_seniority_cell","sample_n":724},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Kotlin","optional":false},{"name":"React Native","optional":false},{"name":"SOC 2","optional":false},{"name":"Swift","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"React.js","optional":true}],"status":"live","first_seen_at":"2026-04-28T20:19:28Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-11-01T07:23:31Z","board_verified":true,"closed_at":null,"days_open":186,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":186},"description":"About Us\nBeast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.\nAbout Us\nBeast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.\nThe Opportunity\nWe are building a first-of-its-kind consumer membership ecosystem from the ground up - and when you're serving 100M+ users across iOS, Android, and web, security has to be built in from day one, not bolted on later. As our Staff Mobile & Product Security Engineer, you will be the foundational security hire on the Security team, embedded directly with product and mobile squads to ship features that are secure by design rather than secured after the fact.\nThis is a hands-on, build-with-the-team role. You'll own mobile and product application security, run the pen testing program (with deep focus on mobile attack surface), and architect the controls that meet partner security requirements so the business can close deals and ship with confidence.\nThe Product\nYou will be the security anchor underneath a membership ecosystem anchored around the MrBeast audience, spanning native mobile apps, web clients, and backend platform services. Your surface area spans every product squad and every partnership:\nMobile Security: iOS and Android app security - secure storage, certificate/key pinning, jailbreak/root and tamper detection, secure IPC, mobile authN/authZ flows, and hardening of the mobile SDK and build/release pipeline.\nProduct & Application Security: Threat modeling, secure-by-default patterns, code review, and developer-facing tooling across the membership app, creator marketplace, and platform services.\n Offensive Testing: A pen testing program you own end-to-end - internal red-team exercises (including mobile-specific testing: static/dynamic analysis, reverse engineering, API abuse), coordinated external engagements, and continuous validation against real attacker behavior.\n Security Architecture: The control framework that lets us meet partner security requirements - and the architecture decisions that keep our mobile and product surfaces ready for the next partner, not scrambling for them.\nWhat You'll Do\nEmbed directly with mobile and product squads - membership app (iOS/Android), marketplace, data & identity - to threat-model, review, and harden features before they ship.\nOwn the mobile application security program end-to-end: secure mobile SDLC, mobile-specific code review (Swift/Kotlin/React Native, as applicable), dependency and supply-chain controls, and developer-facing security tooling.\nOwn the broader product application security program: secure-by-default patterns, API and backend security review, and paved-road tooling for engineering teams.\nRun the pen testing program - hands-on offensive work spanning mobile (static/dynamic analysis, binary/reverse engineering, on-device attack surface) and web/API, plus coordination of external engagements - and turn findings into fixed issues, not tickets in a backlog.\nArchitect the security controls and documentation that meet partner security requirements, so partnership deals close on our schedule.\nSet the security baseline for a zero-to-one, AI-native stack: coding agents, model and prompt security, mobile AI features, and the new attack surface that comes with AI-native products.\nWrite the playbook - mobile and product security standards, guardrails, and the \"paved road\" - so as the org scales, secure is the easy path.\nWho You Are\nEmbedded Builder: You've been the security engineer on a product or mobile team, not just a reviewer at the gate. You write code, file PRs, and ship fixes yourself when it's the fastest path.\n Mobile Security Depth: You've secured native iOS and/or Android applications at consumer scale - you understand mobile-specific threats (reverse engineering, tampering, insecure storage, insecure IPC, mobile API abuse) and how to design against them.\nAppSec at Consumer Scale: You've run or heavily contributed to an application security program inside a consumer product used by millions - you know the real tradeoffs between coverage, velocity, and risk.\nOffensive Hands-On: You can pen test mobile and web applications, not just read pen test reports. You've found real bugs in real systems - including on-device and API-level mobile vulnerabilities - and shepherded them through to fix.\n Partner-Compliance Fluent: You've architected against partner security frameworks (or equivalents - SOC 2, PCI, vendor security reviews, mobile app store security requirements) and know how to translate requirements into real controls without theater.\nAI-Native: You aren't just curious about AI; you are burning through tokens, using coding agents daily, and thinking about how AI changes both how we build and what we have to defend - including on-device and mobile AI features.\nScrappy & Scaled: You have the startup experience to build from zero with a nimble team, plus the big-tech exposure to know what breaks when a product hits massive scale.\nAction-Oriented: You thrive in ambiguity and prefer shipping controls over writing policy. You'd rather land a fix than run a meeting.\nCompensation: $205,000 -$256,000 + 15% bonus + equity\nBenefits\nThe Perks, Why Work On the MrBeast Team\nWe are redefining what entertainment and storytelling look like at global scale. Every piece of content we publish reaches millions and influences culture in real time. This is your opportunity to lead the team that decides how those moments come to life across every screen.\nCompetitive Salary\nGenerous Medical (Blue Cross Blue Shield), Dental, Vision and company-paid Life Insurance \nCompany contributions to employee Health Savings Accounts (HSA) \n401k Plan with Safe Harbor company-matching\nFlexible vacation policy and paid company holidays\nCompany-provided technology package \nRelocation assistance where applicable, including travel and company-provided housing for the first 90 days","description_format":"text","description_chars":7484,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Flexible vacation policy","Life insurance","Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Influencers","Content Creation"],"lifecycle":[{"event":"open","at":"2026-09-11T01:59:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":302500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.719,"p_room":0.28,"age_days":186,"expected_fill_days":81,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/mrbeastyoutube-staff-embedded-mobile-product-security-engineer","json_url":"https://alion.io/job/mrbeastyoutube-staff-embedded-mobile-product-security-engineer.json","meta":{"generated_at":"2026-11-01T10:23:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16069,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678220},"rest":"https://alion.io/mcp/rest/get_company?id=678220"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmrbeastyoutube-staff-embedded-mobile-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmrbeastyoutube-staff-embedded-mobile-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmrbeastyoutube-staff-embedded-mobile-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mrbeastyoutube-staff-embedded-mobile-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmrbeastyoutube-staff-embedded-mobile-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":696135}},{"tool":"search_jobs","arguments":{"company":"mrbeastyoutube.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":696135},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}