Lead Mobile Threat Researcher/Engineer - Helsinki

microTECH Global LTD; Helsinki; Remote; EUR 70,000 - 100,000; Full time

Job summary

microTECH Global Limited seeks a security-focused analyst to conduct security assessments, vulnerability analysis, and malicious behavior research for HarmonyOS applications. You will leverage 5+ years of Android or iOS experience to build a robust security framework and ensure apps operate securely within the ecosystem.

Responsibilities include testing, analyzing threats, writing detailed reports, and developing remediation solutions.

Qualifications

• Over 5 years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis.
• Proficient in mobile app security mechanisms, architectures and vulnerability principles.
• Deep understanding of malicious behavior patterns such as malware infection and data theft.
• Proficient in at least one security analysis tool such as JEB, JADX, IDA Pro, Ghidra, Frida or Burp Suite.
• Experience applying machine learning to cybersecurity challenges; proficient in Python and DL frameworks.

Responsibilities

• Responsible for security testing and evaluation of HarmonyOS applications using advanced techniques to identify vulnerabilities and threats.
• Conduct in-depth research on malicious attack methods and behavioral patterns in Android or iOS apps; develop detection models and solutions.
• Analyze detected security issues, write detailed security reports, and track remediation progress.
• Keep track of new vulnerabilities and incidents in mobile security and provide timely warnings and response strategies.
• Collaborate with the team to conduct HarmonyOS security attack and defense drills.

Skills

Android security analysis

iOS security analysis

Reverse engineering

Threat hunting

Malicious behavior analysis

Python

Java

Machine learning

Team collaboration

Security testing frameworks

Education

Bachelor's degree in Computer Science or Information Security

Tools

JEB

JADX

IDA Pro

Ghidra

Frida

Burp Suite

TensorFlow

PyTorch

Job description

In this role, you will conduct security assessments, vulnerability analysis, and malicious behavior research for HarmonyOS applications. Using your deep expertise in Android or iOS application analysis, which spans over five years, you will build a robust security framework for HarmonyOS applications, ensure applications operate securely and stable in ecosystem.

Responsibilities

• Responsible for the security testing and evaluation of HarmonyOS applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.

• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.

• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.

• Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company.

• Collaborate with team members to conduct HarmonyOS application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities.

Requirements

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.

• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.

• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc., with strong malicious sample analysis capabilities.

• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).

• Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch).

• Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with “can-do” attitude and good work ethics, strong learning ability, and innovative thinking.

Nice-to-have

• Familiarity with the basic principles, application development frameworks, and security mechanisms of the HarmonyOS operating system is a bonus.