Mobile threat Researcher (Android Reverse Engineering )

Gitps - Global It Professional Services Oy; Helsinki; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Gitps - Global It Professional Services Oy is seeking an experienced security analyst to lead mobile application security testing and research in Helsinki. The role focuses on Android malware and threat intelligence, with an emphasis on ML/AI exposure.

Responsibilities include evaluating applications for vulnerabilities, researching malicious behavior, writing reports, and developing mitigation strategies with the team. Strong communication and collaboration are essential for success.

Formación

• Bachelor's degree or higher in Computer Science, Information Security or related field
• 5+ years of Android/iOS security analysis, reverse engineering, threat hunting and analysis
• Experience with malware analysis and security research

Responsabilidades

• Responsible for security testing and evaluation of applications to identify vulnerabilities and threats
• Research malicious attack methods and behavioral patterns for Android or iOS apps
• Write detailed security analysis reports and develop mitigation solutions
• Track latest vulnerabilities and incidents and provide response strategies
• Collaborate with team on security attack/defense drills and improve protection capabilities

Conocimientos

Android security

iOS security

Threat hunting

Malware analysis

Reverse engineering

Python

ML in security

Educación

Bachelor's degree in CS or related

Herramientas

JEB

JADX

IDA Pro

Ghidra

Frida

Burp Suite

Descripción del empleo

Please note - Experience in Android Malware, Threat Intelligence and Machine Learning/AI exposure is mandatory for this role.

Role & responsibilities

• Responsible for the security testing and evaluation of applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.
• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.
• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.
• Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company.
• Collaborate with team members to conduct application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities.

Requirements :

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.
• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.
• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc with strong malicious sample analysis capabilities.
• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).
• Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch).
• Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with can-do attitude and good work ethics, strong learning ability, and innovative thinking.