Reverse Engineer – Android

Role overview Analyze Android applications and software development kits to uncover how they work and identify security risks to users, devices, and data. The work combines static and dynamic analysis, reverse engineering, and threat research, with findings shared across security and development teams. The position is remote within the United States.

Responsibilities - Examine Android apps and SDKs to understand their architecture, behavior, and potential security issues. - Decompile, disassemble, and debug software to investigate functionality and extract relevant details. - Identify data leakage, risks to users or devices, and malicious code execution. - Research Android malware, exploits, and emerging mobile security threats, then document findings. - Share analysis and recommendations with researchers, developers, and other stakeholders.

Requirements - At least 3–5 years of relevant experience in Android development, reverse engineering, penetration testing, application security assessments, or capture-the-flag work. - Hands-on experience analyzing, unpacking, and reverse engineering malicious apps or SDKs. - Familiarity with static and dynamic analysis methods and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp. - Experience with Java, Kotlin, JavaScript, Flutter, or other mobile development languages. - Ability to reverse engineer ELF native binaries and develop detection signatures, such as SQL or YARA rules.

Nice to have - Knowledge of Android fundamentals, including app lifecycles, APIs, AOSP, and application packaging. - Understanding of mobile app store policies, network traffic analysis, security fundamentals, encoding, cryptography, and authentication. - Experience researching advanced threats using open-source intelligence sources.