Android Security Research Engineer

C3iHub, IIT Kanpur; Delhi; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

C3iHub, IIT Kanpur is seeking an Android Security Research Engineer who thrives on dissecting Android internals, breaking defenses, and researching vulnerabilities across apps and platforms. You will perform reverse engineering, mobile pentesting, exploit analysis, and security research with exposure to kernel- and framework-level surfaces.

The role involves developing tooling with Frida and Objection, analyzing malware samples, bypassing SSL pinning and anti-debug, and contributing to

Qualifications

• Strong understanding of Android fundamentals and Android internals (framework and system architecture).
• Hands-on experience with Android kernel concepts and attack surface awareness.
• Proven experience in reverse engineering Android applications.
• Strong hands-on knowledge of Android application penetration testing methodologies.
• Experience replicating and analyzing known Android exploits and adapting PoCs.
• Familiarity with exploit chaining concepts in mobile attack scenarios.
• Hands-on experience working with Corellium Android environments for security research and testing.

Responsibilities

• Perform reverse engineering of Android applications (APK/AAB) to identify security flaws, logic issues, and weak security implementations.
• Conduct Android application penetration testing, including runtime manipulation, hooking, and traffic interception.
• Analyze and bypass common mobile security controls such as SSL pinning, root detection, anti-debugging, tamper protection, and obfuscation.
• Research Android internals including the Android framework, ART/Dalvik runtime, system services, Binder IPC, and permission model.
• Perform dynamic and static analysis of Android malware and suspicious applications (good to have).
• Develop, customize, and maintain Frida scripts, Objection workflows, and custom tooling for security research.
• Replicate and analyze publicly known Android vulnerabilities and exploits to understand root causes and impact.
• Assist in vulnerability research and exploitation, including logic flaws, exploit chaining, and basic memory corruption concepts.

Skills

Android internals

Reverse engineering

Android security testing

Frida scripting

Objection workflows

Corellium environments

Exploit analysis

Malware analysis

Traffic interception

SSL pinning bypass

Tools

Frida

Objection

Corellium

Burp Suite

Job description

We are looking for an Android Security Research Engineer who is passionate about understanding Android internals, breaking application and platform defenses, and conducting deep vulnerability research at both the application and system level. The ideal candidate has strong hands‑on experience in reverse engineering, mobile application pentesting, exploit analysis, and security research, with exposure to kernel‑and framework‑level attack surfaces.

Key Responsibilities

• Perform reverse engineering of Android applications (APK/AAB) to identify security flaws, logic issues, and weak security implementations
• Conduct Android application penetration testing, including runtime manipulation, hooking, and traffic interception
• Analyze and bypass common mobile security controls such as SSL pinning, root detection, anti-debugging, tamper protection, and obfuscation
• Research Android internals including the Android framework, ART/Dalvik runtime, system services, Binder IPC, and permission model
• Perform dynamic and static analysis of Android malware and suspicious applications (good to have)
• Develop, customize, and maintain Frida scripts, Objection workflows, and custom tooling for security research
• Replicate and analyze publicly known Android vulnerabilities and exploits to understand root causes and impact
• Assist in vulnerability research and exploitation, including logic flaws, exploit chaining, and basic memory corruption concepts

Must-Have Skills

• Strong understanding of Android fundamentals and Android internals (framework and system architecture)
• Hands‑on experience with Android kernel concepts and attack surface awareness
• Proven experience in reverse engineering Android applications
• Strong hands‑on knowledge of Android application penetration testing methodologies
• Experience replicating and analyzing known Android exploits and adapting PoCs
• Familiarity with exploit chaining concepts in mobile attack scenarios
• Hands‑on experience working with Corellium Android environments for security research and testing
• Practical experience bypassing:
• SSL pinning
• Anti‑debugging and runtime protections
• SSL pinning
• Anti‑debugging and runtime protections
• Experience with runtime instrumentation and traffic interception
• Familiarity with tools including (but not limited to):
• ADB
• Frida
• Objection
• Pidcat
• Burp Suite
• ADB
• Frida
• Objection
• Pidcat
• Burp Suite
• Basic understanding of exploitation techniques and vulnerability research concepts
• Strong understanding of Android fundamentals and Android internals (framework and system architecture)
• Hands‑on experience with Android kernel concepts and attack surface awareness
• Proven experience in reverse engineering Android applications
• Strong hands‑on knowledge of Android application penetration testing methodologies
• Experience replicating and analyzing known Android exploits and adapting PoCs
• Familiarity with exploit chaining concepts in mobile attack scenarios
• Hands‑on experience working with Corellium Android environments for security research and testing
• Practical experience bypassing:
• SSL pinning
• Anti‑debugging and runtime protections
• Experience with runtime instrumentation and traffic interception
• Familiarity with tools including (but not limited to):
• ADB
• Frida
• Objection
• Pidcat
• Burp Suite
• Basic understanding of exploitation techniques and vulnerability research concepts

Good-to-Have Skills

• Experience with Android malware analysis
• Hands‑on experience with:
• Custom ROMs or recovery environments
• Custom ROMs or recovery environments
• Familiarity with native components (NDK), JNI, and ARM64
• Experience with Android malware analysis
• Hands‑on experience with:
• Custom ROMs or recovery environments
• Familiarity with native components (NDK), JNI, and ARM64