Reverse Engineer - Android

Role overview Investigate Android applications and SDKs to understand their design and behavior, uncover security risks, and contribute to mobile threat intelligence. The work uses reverse engineering and analysis to identify issues such as data exposure or malicious execution, then turns findings into useful guidance for security and development partners.

Responsibilities - Analyze Android apps and SDKs to map their code, architecture, and runtime behavior. - Use decompilation, disassembly, and debugging to investigate software and extract evidence about its operation. - Detect potential harm to users or devices, data leakage, and malicious code execution. - Research Android malware, exploits, and developing security trends, and report findings. - Collaborate with researchers, developers, and other stakeholders to share conclusions and recommend improvements.

Requirements - At least 3–5 years of experience in one or more of Android development, reverse engineering, penetration testing, application security assessment, or CTF work. - Practical experience unpacking and reverse engineering malicious Android apps or SDKs. - Skill with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp. - Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile languages. - Experience analyzing native ELF binaries and writing detection signatures such as SQL or YARA rules.

Nice to have - Understanding of Android app lifecycles, APIs, AOSP, app construction, and mobile store policies. - Knowledge of techniques used to compromise devices or data, plus network traffic analysis and security fundamentals. - Familiarity with encoding, cryptography, authentication, and open-source threat research.