Android Reverse Engineer

Trellix US LLC; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Trellix US LLC is seeking an Android security analyst to analyze applications and SDKs, uncover security risks, and share findings with stakeholders. The role combines reverse engineering, static/dynamic analysis, and threat research.

You will decompile, unpack, disassemble, and debug Android projects, identify data exposure and malware, and develop scripts to speed up assessments. Collaboration with security and development teams is essential.

Qualifications

• Three to five or more years of experience in at least one relevant area: Android development, reverse engineering, penetration testing, or application security assessment.
• Hands-on experience analyzing and reverse engineering malicious applications or SDKs.
• Ability to read and analyze source code and mobile application binaries.
• Experience with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile development languages, plus SQL.
• Understanding of native ELF binary reverse engineering.

Responsibilities

• Decompile, unpack, disassemble, and debug Android apps and SDKs to examine their code, structure, and behavior.
• Use static and dynamic analysis to identify data exposure, risks to users or devices, and malicious code execution.
• Assess application and SDK security, then document findings and recommendations.
• Develop or maintain scripts and tools that make analysis more efficient.
• Research Android malware, exploits, and emerging security techniques, and report relevant findings.
• Collaborate with security and development teams to communicate results and support more secure software.

Skills

Android development

Reverse engineering

Penetration testing

Application security assessment

Tools

JADX

Ghidra

Frida

IDA Pro

Burp

Job description

Role overview

Analyze Android applications and software development kits to uncover how they work and identify security risks. The role combines reverse engineering, application security assessment, and threat research, with findings shared with researchers, developers, and other stakeholders.

Responsibilities

• Decompile, unpack, disassemble, and debug Android apps and SDKs to examine their code, structure, and behavior.
• Use static and dynamic analysis to identify data exposure, risks to users or devices, and malicious code execution.
• Assess application and SDK security, then document findings and recommendations.
• Develop or maintain scripts and tools that make analysis more efficient.
• Research Android malware, exploits, and emerging security techniques, and report relevant findings.
• Collaborate with security and development teams to communicate results and support more secure software.

Requirements

• Three to five or more years of experience in at least one relevant area: Android development, reverse engineering, penetration testing, or application security assessment.
• Hands-on experience analyzing and reverse engineering malicious applications or SDKs.
• Ability to read and analyze source code and mobile application binaries.
• Experience with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile development languages, plus SQL.
• Understanding of native ELF binary reverse engineering.

Nice to have

• Participation in mobile software capture-the-flag activities.
• Knowledge of Android internals and fundamentals.