Lead Mobile Threat Researcher/Engineer

microTECH Global LTD; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Job summary

microTECH Global LTD in Helsinki, Finland, seeks a senior security analyst to assess HarmonyOS apps, perform vulnerability analysis, and research malicious behaviors. You will leverage deep Android/iOS security expertise and contribute to a robust security framework across the HarmonyOS ecosystem.

You will conduct in-depth security research, build detection models, write comprehensive reports, and collaborate with partners to strengthen defenses and incident response.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• 5+ years of experience in Android or iOS app security analysis, reverse engineering, threat hunting and analysis.

Responsibilities

• Conduct security testing and evaluation of HarmonyOS applications using advanced methods to identify vulnerabilities and threats.
• Research malicious behavior patterns and develop detection models and solutions in collaboration with external partners.
• Analyze security issues, write detailed reports, and propose practical recovery and reinforcement strategies.
• Track latest vulnerabilities and incidents, provide timely warnings and response strategies.
• Collaborate with the team to conduct HarmonyOS security drills to improve protection and response capabilities.

Skills

Security analysis

Reverse engineering

Threat hunting

Android security

iOS security

Malware analysis

Python

Java

JEB

JADX

IDA Pro

Ghidra

Frida

Burp Suite

TensorFlow

PyTorch

Communication

Team collaboration

Education

Bachelor's degree or higher in Computer Science, Information Security, or related field

Tools

JEB

JADX

IDA Pro

Ghidra

Frida

Burp Suite

Job description

In this role, you will conduct security assessments, vulnerability analysis, and malicious behavior research for HarmonyOS applications. Using your deep expertise in Android or iOS application analysis, which spans over five years, you will build a robust security framework for HarmonyOS applications, ensure applications operate securely and stable in ecosystem.

Responsibilities

• Responsible for the security testing and evaluation of HarmonyOS applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.
• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.
• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.
• Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company.
• Collaborate with team members to conduct HarmonyOS application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities.

Requirements

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.
• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.
• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc., with strong malicious sample analysis capabilities.
• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).
• Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch).
• Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with "can-do" attitude and good work ethics, strong learning ability, and innovative thinking.

Nice-to-have

• Familiarity with the basic principles, application development frameworks, and security mechanisms of the HarmonyOS operating system is a bonus.