Lead Mobile Threat Researcher/Engineer

Huawei Finland R&D; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Job summary

Huawei Finland R&D in Helsinki seeks a senior/lead expert in HarmonyOS AppGallery security analysis with 5+ years in Android or iOS app security. You will perform security testing, vulnerability analysis, and malicious behaviour research to build robust HarmonyOS app protections.

You will collaborate with researchers, security engineers, and product managers to advance AI-driven malware detection and defense, ensuring secure and stable app operation within HarmonyOS ecosystem.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or related fields with more than 5+ years of experience in Android or iOS app security analysis, reverse engineering, threat hunting and analysis.
• Proficient in security mechanisms and vulnerability principles of Android and iOS apps, familiar with app reverse engineering.
• Deep understanding of malicious behavior patterns in the mobile app security industry and strong sample analysis capabilities.
• Experience using security analysis tools such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite with some software development (Python/Java).
• Experience applying ML/DL to cybersecurity challenges, familiar with TensorFlow or PyTorch.

Responsibilities

• Responsible for security testing and evaluation of HarmonyOS applications using advanced techniques to identify vulnerabilities.
• Conduct in-depth research on malicious attack methods, behavioral characteristics, and evolution of Android/iOS apps; develop detection solutions.
• Write detailed security analysis reports and propose practical recovery and reinforcement solutions; track rectification progress.
• Keep up-to-date with vulnerability information and security incidents; provide timely warnings and response strategies.
• Collaborate with team to conduct HarmonyOS app security drills to enhance protection capabilities.

Skills

Android security

iOS security

Malware analysis

Reverse engineering

Threat hunting

Python

Java

Education

Bachelor's degree in CS or Info Security

Tools

JEB

JADX

IDA Pro

Ghidra

Frida

Burp Suite

Job description

Huawei Consumer Business Group is the leader in the all-scenario AI life. It covers smartphones, PC and tablets, wearables, mobile broadband devices, family devices, and device cloud services. Huawei Consumer Business Group is dedicated to delivering the latest technologies to consumers and sharing the happiness of technological advances with more people around the world. We believe in creating safe, privacy-friendly, and high-quality products with great user experiences for our consumers.

In Cloud Content Security Lab, we are seeking a highly motivated expert at senior or lead level that specializes in application security analysis for HarmonyOS AppGallery with extensive experience in Android or iOS application analysis. In this role, you will conduct security assessments, vulnerability analysis, and malicious behavior research for HarmonyOS applications. Using your deep expertise in Android or iOS application analysis, which spans over five years, you will build a robust security framework for HarmonyOS applications, ensure applications operate securely and stably in the HarmonyOS ecosystem. You, in collaboration with our research partner, will be at the forefront of pushing the boundaries of AI-driven malware detection and analysis, developing cutting‑edge techniques to enhance the security of our HarmonyOS applications. You will collaborate with a talented team of researchers, security engineers, and product manager to achieve the goal.

Responsibilities

• Responsible for the security testing and evaluation of HarmonyOS applications, utilizing advanced industry or state‑of‑the‑art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.

• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.

• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.

• Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company.

• Collaborate with team members to conduct HarmonyOS application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities.

Requirements

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.

• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.

• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc., with strong malicious sample analysis capabilities.

• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).

• Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch).

• Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with “can-do” attitude and good work ethics, strong learning ability, and innovative thinking.

Nice-to-have

• Familiarity with the basic principles, application development frameworks, and security mechanisms of the HarmonyOS operating system is a bonus.

Location

On-site in Helsinki, Finland.

Why join us?

• Opportunity to develop your skills and competencies through interesting projects.

• Be a part of a dynamic, collaborative team environment where you'll learn from your colleagues.

• Excellent working tools and equipment that enable you to perform at your best.

• An international atmosphere with global impact and a culture that values creativity, problem-solving and cross-disciplinary collaboration.

This position is a full-time consultant position and the contract will be signed with our supplier.