Accountabilities

Conduct comprehensive technical analysis of Android applications and SDKs to understand their architecture, code structure, functionality, and potential security weaknesses.
Perform static and dynamic application analysis to identify suspicious behavior, privacy risks, malicious components, and potential vulnerabilities.
Apply reverse engineering methodologies, including decompilation, disassembly, and debugging, to investigate application behavior and assess software security.
Analyze and investigate potentially malicious Android applications, SDKs, and native binaries to identify threats affecting users, devices, and sensitive information.
Identify security risks associated with data leakage, unauthorized activities, malicious code, and potentially harmful application behavior.
Investigate Android malware, emerging exploits, and evolving mobile threat trends to support threat intelligence activities.
Develop technical reports and communicate research findings, security assessments, and actionable recommendations to relevant stakeholders.
Collaborate with cybersecurity researchers, software developers, and other technical teams to exchange knowledge and improve mobile application security.
Contribute to the development of detection signatures and analytical resources, including SQL-based and YARA-based indicators.
Support investigations involving complex application frameworks, software packers, obfuscation techniques, and native Android components.
Research emerging cyber threats and advanced persistent threat (APT) activity using open-source intelligence resources and established threat intelligence frameworks.
Help strengthen the organization's Android security research capabilities by identifying new analytical approaches, sharing technical expertise, and monitoring developments across the mobile ecosystem.

Requirements

3–5+ years of professional experience in one or more of the following areas: Android development, software reverse engineering, penetration testing, application security assessments, or Capture the Flag (CTF) cybersecurity challenges.
Hands-on experience analyzing, unpacking, and reverse engineering Android applications, including potentially malicious applications and SDKs.
Strong knowledge of static and dynamic analysis methodologies applied to mobile application security.
Practical experience with reverse engineering and security analysis tools such as JADX, Ghidra, Frida, IDA Pro, and Burp Suite.
Programming knowledge in Java, Kotlin, JavaScript, Flutter, or other mobile application development technologies.
Experience analyzing ELF-format native binaries and understanding compiled software components.
Familiarity with developing detection signatures and indicators using technologies such as SQL and YARA.
Strong understanding of Android fundamentals, including application architecture, activity lifecycles, common Android APIs, the Android Open Source Project (AOSP), and application development processes.
Knowledge of common techniques used by malicious applications to compromise devices, access sensitive information, or negatively affect user privacy.
Understanding of mobile application security principles, network traffic analysis, authentication mechanisms, and data protection.
Familiarity with encoding, cryptography, and security-related implementation practices.
Experience researching malware and emerging cyber threats using open-source intelligence resources such as VirusTotal, MITRE, ExploitDB, and other relevant platforms.
Understanding of Android rooting concepts, application security restrictions, and mobile operating system behavior.
Familiarity with complex application frameworks, software packers, and application protection mechanisms.
Awareness of mobile application marketplace policies, including requirements related to advertising, potentially harmful applications (PHAs), and developer compliance.
Strong analytical and problem-solving abilities, with the capacity to investigate complex technical issues independently.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1