Android Reverse Engineer

Ai2cyber; United States; Remote; USD 81,000 - 127,000; Full time

Benefits offered by this job

Remote-first culture

Hacker hours

Competitive compensation + performance

Training budget

A chance to build the tools you wish

A team that gets it

Job summary

AI2CYBER is seeking a world-class Android Reverse Engineer based in Greece. You will dive into APK guts, weaponizing Frida, Ghidra, and friends to expose vulnerabilities and design secure-by-default apps.

The ideal candidate has 5+ years in Android RE, mastery of Android internals, and fluency with Frida, Ghidra, APKTool, Dex2Jar, and native C/C++. You’ll analyze Java/Kotlin and C/C++, reverse obfuscation, and drop threat-focused reports.

Qualifications

• 5+ years doing deep Android RE, mobile app hacking, or security research (or a Master’s with serious project chops).
• Mastery of Android internals—ART/Dalvik, Zygote, Binder, the works.
• Fluency with Frida, Ghidra, APKTool, Dex2Jar, Magisk modules, Xposed—whatever works.
• Solid coding skills in Java/Kotlin and native C/C++ (ARM assembly a big plus).
• Familiarity with obfuscation frameworks (DexGuard, ProGuard) and how to beat them.
• Strong instinct for threat modeling, exploit chains, and mobile malware ops.
• Understanding of OWASP Mobile Top 10—but you’ve probably written a better list.

Responsibilities

• Tear apart APKs and native libs to find vulnerabilities, logic bombs, and covert payloads.
• Use tools like Frida, Ghidra, IDA Pro, and JADX to expose hidden internals and bad practices.
• Break obfuscation, fingerprint malware, and reverse custom protocols.
• Analyze both Java/Kotlin and native (C/C++) code—static and runtime.
• Design anti-tamper and anti-reversing layers that slow down the next you.
• Guide dev teams like a ghost in the machine—building secure-by-default code.
• Stay ahead of Android threat actors. If it’s zero-day, you already saw it coming.
• Drop reports that read like threat actor confessionals—because you know how they think.

Skills

Android internals mastery

Java/Kotlin coding

C/C++ coding

Threat modeling

Mobile malware research

Education

Master’s degree in Computer Science or related field

Bachelor’s degree with strong project chops

Tools

Frida

Ghidra

APKTool

Dex2Jar

IDA Pro

Magisk modules

Xposed

Job description

Who We Are

We are not your average cybersecurity firm. We build offense-grade defenses. We break apps so others can’t. We reverse-engineer mobile chaos into predictable security. If you think APKs are puzzles and obfuscation is a challenge, not a blocker - you are already one of us.

The Mission

We are hunting for a world-class Android Reverse Engineer based in Greece, who speaks bytecode fluently, thinks in opcodes, and lives to dismantle and harden Android applications. You’ll be deep in APK guts, weaponizing Frida, Ghidra, and friends, turning shady behaviors into actionable intel - and turning your knowledge into hardened, unbreakable apps.

What You’ll Do

• Tear apart APKs and native libs to find vulnerabilities, logic bombs, and covert payloads.
• Use tools like Frida, Ghidra, IDA Pro, and JADX to expose hidden internals and bad practices.
• Break obfuscation, fingerprint malware, and reverse custom protocols.
• Analyze both Java/Kotlin and native (C/C++) code—static and runtime.
• Design anti-tamper and anti-reversing layers that slow down the next you.
• Guide dev teams like a ghost in the machine—building secure-by-default code.
• Stay ahead of Android threat actors. If it’s zero-day, you already saw it coming.
• Drop reports that read like threat actor confessionals—because you know how they think.

You Should Have

• 5+ years doing deep Android RE, mobile app hacking, or security research (or a Master’s with serious project chops).
• Mastery of Android internals—ART/Dalvik, Zygote, Binder, the works.
• Fluency with Frida, Ghidra, APKTool, Dex2Jar, Magisk modules, Xposed—whatever works.
• Solid coding skills in Java/Kotlin and native C/C++ (ARM assembly a big plus).
• Familiarity with obfuscation frameworks (DexGuard, ProGuard) and how to beat them.
• Strong instinct for threat modeling, exploit chains, and mobile malware ops.
• Understanding of OWASP Mobile Top 10—but you’ve probably written a better list.

Bonus Points If You

• Have dropped 0-days or built open-source tools.
• Know how malware hides, mutates, persists.
• Hold OSCP, OSCE, or any badge earned the hard way.
• Have presented at DEF CON, Black Hat, or dropped blogs that made people sweat.

What You Get

• Remote-first culture. Hacker hours. We don’t care where you work—as long as you deliver.
• Competitive compensation + performance-based bonuses.
• Training budget—go break new tools or build them.
• A chance to build the tools you wish existed.
• A team that gets it.

Note: All applications will be treated with strict confidentiality.

This position in available only for Greek residents.