Android Reverse Engineer

Role overview Analyze Android applications and software development kits to uncover how they work and identify security risks. The role combines reverse engineering, application security assessment, and threat research, with findings shared with researchers, developers, and other stakeholders.

Responsibilities - Decompile, unpack, disassemble, and debug Android apps and SDKs to examine their code, structure, and behavior. - Use static and dynamic analysis to identify data exposure, risks to users or devices, and malicious code execution. - Assess application and SDK security, then document findings and recommendations. - Develop or maintain scripts and tools that make analysis more efficient. - Research Android malware, exploits, and emerging security techniques, and report relevant findings. - Collaborate with security and development teams to communicate results and support more secure software.

Requirements - Three to five or more years of experience in at least one relevant area: Android development, reverse engineering, penetration testing, or application security assessment. - Hands-on experience analyzing and reverse engineering malicious applications or SDKs. - Ability to read and analyze source code and mobile application binaries. - Experience with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp. - Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile development languages, plus SQL. - Understanding of native ELF binary reverse engineering.

Nice to have - Participation in mobile software capture-the-flag activities. - Knowledge of Android internals and fundamentals.