Security Analyst (Android / iOS)

TheCodingShef; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

OneSpan is seeking a Senior Security Analyst (Android/iOS) to join our Noida team. You will research, develop, and validate advanced mobile security protections across our Android and iOS SDKs, focusing on RASP, anti-tampering, and anti-debugging techniques.

You will perform reverse engineering of mobile applications and malware samples, analyze attack vectors, and collaborate with security and engineering teams to bolster protection in production SDKs.

Qualifications

• Experience in application security for mobile platforms (Android/iOS).
• Proficient with reverse engineering tools (IDA Pro, Ghidra, JEB).
• Experience with dynamic instrumentation and runtime analysis techniques.

Responsibilities

• Research, design, and validate mobile security countermeasures for Android and iOS.
• Analyze mobile apps to identify security weaknesses and bypass techniques.
• Perform reverse engineering of apps, malware samples, and security tools.
• Develop and enhance RASP mechanisms (anti-tampering, anti-debugging, anti-instrumentation).
• Prototype and evaluate new detection techniques in native and platform-specific code (C/C++, Kotlin, Swift, Objective-C).
• Document findings and contribute to threat intelligence.

Skills

Android security

iOS security

Reverse engineering

RASP

Dynamic instrumentation

Code analysis

Security research

Threat modeling

Communication

Tools

IDA Pro

Ghidra

JEB

JADX

Frida

GDB

LLDB

Job description

# Security Analyst (Android / iOS)OneSpanNoidaSeniorPosted 3d agoApply on employer siteYou apply on the employer's own page. Never pay to apply for a job.## About the roleKotlinCI/CDNDK / C++REST / GraphQLAt OneSpan, we specialize in digital identity and anti-fraud solutions that create exceptional and secure experiences.At OneSpan we are looking for a \\*Security Analyst (Android / iOS)\\* to join our team in \\*Noida\\*. In this role, you will contribute to the research, development, and validation of advanced mobile security protections within our Android and iOS SDKs. You will work on identifying attack techniques, designing and implementing new countermeasures, analyzing bypass attempts, and continuously strengthening the Runtime Application Self-Protection (RASP) capabilities of our mobile security platform, collaborating closely with our engineering and security research teams.\\*Here is a little taste of your challenge:\\*· Research, design, develop, and validate mobile security countermeasures for Android and iOS applications.· Analyze Android and iOS applications to identify security weaknesses, attack vectors, and potential bypass techniques against mobile protections.· Perform reverse engineering of mobile applications, malware samples, and security tools to understand attacker techniques and improve defensive capabilities.· Develop and enhance Runtime Application Self-Protection (RASP) mechanisms such as anti-debugging, anti-instrumentation, anti-tampering, anti-hooking, and environment integrity checks.· Research and reproduce real-world attacks such as hooking, dynamic instrumentation, tampering, and runtime manipulation against protected applications.· Prototype, implement, and evaluate new detection techniques in native and platform-specific code (C/C++, Kotlin, Swift, Objective-C).· Use reverse engineering and dynamic analysis tools to assess the effectiveness of protection mechanisms and identify potential bypasses.· Support the design, architecture, and continuous improvement of our Android and iOS mobile security SDKs.· Research and monitor the Indian mobile banking and fintech regulatory landscape (including RBI guidelines and CERT-In requirements) to identify emerging threats and inform the team's research direction for the region.· Engage independently with enterprise customers in the region during technical discussions, able to defend product decisions and countermeasure design without requiring real-time support from the Europe-based team.· Document research findings, attack techniques, and defensive approaches, contributing to internal security knowledge and threat intelligence.· Participate in technical discussions, security research initiatives, and product roadmap decisions.\\*Who are you?\\* There is no set route to become part of Build38. But to be successful in this role, this is the kind of profile we have in mind:· Between 5-12 years of experience in application security, mobile security, reverse engineering, or penetration testing.· Strong understanding of Android and/or iOS application security.· Experience performing reverse engineering of mobile applications.· Familiarity with dynamic instrumentation and runtime analysis techniques.· Experience using reverse engineering tools such as IDA Pro, Ghidra, JEB, or JADX.· Experience with dynamic analysis or instrumentation tools such as Frida, GDB, LLDB, or similar.· Experience developing RASP countermeasures for Android and/or iOS, or at least performing technical analysis and evaluation of mobile RASP protections.· Ability to analyze compiled code and understand low-level behavior.· Ability to communicate (verbally and wri...