Reverse Engineer - Android

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Reverse Engineer - Android based in the United States.

The Android Reverse Engineer will play a key role in strengthening mobile cybersecurity by analyzing Android applications and software development kits (SDKs) to identify security vulnerabilities, malicious behavior, and potential privacy risks.
You will conduct in-depth investigations into application architecture, code functionality, and underlying software components to uncover suspicious activity and emerging threats.
Using advanced reverse engineering techniques and industry-standard analysis tools, you will help identify malicious code, data leakage, and risks affecting mobile devices and their users.
The position also involves contributing to threat intelligence research focused on Android malware, exploits, and evolving cybersecurity trends.
Working alongside security researchers, developers, and technical specialists, you will share findings and recommend solutions that improve application security.
This is an opportunity to contribute to a global cybersecurity initiative in a collaborative, technology-driven environment focused on protecting users and strengthening digital resilience.

Accountabilities

Conduct comprehensive technical analysis of Android applications and SDKs to understand their architecture, code structure, functionality, and potential security weaknesses.
Perform static and dynamic application analysis to identify suspicious behavior, privacy risks, malicious components, and potential vulnerabilities.
Apply reverse engineering methodologies, including decompilation, disassembly, and debugging, to investigate application behavior and assess software security.
Analyze and investigate potentially malicious Android applications, SDKs, and native binaries to identify threats affecting users, devices, and sensitive information.
Identify security risks associated with data leakage, unauthorized activities, malicious code, and potentially harmful application behavior.
Investigate Android malware, emerging exploits, and evolving mobile threat trends to support threat intelligence activities.
Develop technical reports and communicate research findings, security assessments, and actionable recommendations to relevant stakeholders.
Collaborate with cybersecurity researchers, software developers, and other technical teams to exchange knowledge and improve mobile application security.
Contribute to the development of detection signatures and analytical resources, including SQL-based and YARA-based indicators.
Support investigations involving complex application frameworks, software packers, obfuscation techniques, and native Android components.
Research emerging cyber threats and advanced persistent threat (APT) activity using open-source intelligence resources and established threat intelligence frameworks.
Help strengthen the organization's Android security research capabilities by identifying new analytical approaches, sharing technical expertise, and monitoring developments across the mobile ecosystem.
Requirements
3–5+ years of professional experience in one or more of the following areas: Android development, software reverse engineering, penetration testing, application security assessments, or Capture the Flag (CTF) cybersecurity challenges.
Hands-on experience analyzing, unpacking, and reverse engineering Android applications, including potentially malicious applications and SDKs.
Strong knowledge of static and dynamic analysis methodologies applied to mobile application security.
Practical experience with reverse engineering and security analysis tools such as JADX, Ghidra, Frida, IDA Pro, and Burp Suite.
Programming knowledge in Java, Kotlin, JavaScript, Flutter, or other mobile application development technologies.
Experience analyzing ELF-format native binaries and understanding compiled software components.
Familiarity with developing detection signatures and indicators using technologies such as SQL and YARA.
Strong understanding of Android fundamentals, including application architecture, activity lifecycles, common Android APIs, the Android Open Source Project (AOSP), and application development processes.
Knowledge of common techniques used by malicious applications to compromise devices, access sensitive information, or negatively affect user privacy.
Understanding of mobile application security principles, network traffic analysis, authentication mechanisms, and data protection.
Familiarity with encoding, cryptography, and security-related implementation practices.
Experience researching malware and emerging cyber threats using open-source intelligence resources such as VirusTotal, MITRE, ExploitDB, and other relevant platforms.
Understanding of Android rooting concepts, application security restrictions, and mobile operating system behavior.
Familiarity with complex application frameworks, software packers, and application protection mechanisms.
Awareness of mobile application marketplace policies, including requirements related to advertising, potentially harmful applications (PHAs), and developer compliance.
Strong analytical and problem-solving abilities, with the capacity to investigate complex technical issues independently.
Excellent written and verbal communication skills, particularly when documenting technical findings and explaining security risks to different audiences.
Ability to collaborate effectively with distributed technical teams and contribute to a knowledge-sharing research environment.
Curiosity, attention to detail, and a proactive approach to learning about emerging mobile security threats and technologies.
Benefits
Retirement Plans: Access to retirement savings programs to support long-term financial planning.
Healthcare Coverage: Medical, dental, and vision insurance.
Paid Time Off: Paid leave to support personal needs and work-life balance.
Paid Parental Leave: Family-friendly leave benefits for eligible employees.
Flexible Working Hours: Flexible scheduling options to support different working styles and personal commitments.
Remote Work Flexibility: Opportunity to work remotely within the United States.
Community Involvement: Programs and opportunities supporting employee participation in community initiatives.
Inclusive Workplace: A collaborative environment that values diverse experiences, perspectives, and technical expertise.
Professional Development: Opportunities to expand cybersecurity knowledge, develop specialized technical skills, and contribute to innovative security research.
Meaningful Impact: Opportunity to help protect mobile users, organizations, and digital ecosystems against evolving cybersecurity threats.