Mobile Malware Engineer: Android/iOS Reverse Engineering

Allyon; Linthicum (MD); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Flexible medical plans

Wellness incentives

Telemedicine

401(k) with HSA

Dental & vision coverage

Paid time off

Job summary

Allyon is hiring a Mobile Malware Engineer in Linthicum Heights, MD to support the U.S. Air Force and DC3. Responsibilities include malware reverse engineering, static/dynamic analysis on Android/iOS, and developing tooling to detect and defeat threats.

Requires Top Secret with SCI eligibility, advanced degrees, and strong reverse-engineering experience. The role is full-time with competitive compensation and comprehensive benefits.

Qualifications

• Must have degree in Cybersecurity, CS, or related field, or equivalent experience.
• Active Top Secret with SCI eligibility clearance required.
• Bachelor's + 8 yrs or Master's + 6 yrs experience."],
• job_responsibilities_description [

Responsibilities

• Using expertise in malware reverse engineering and analysis, evaluate complex malicious code through tools including disassemblers, debuggers, hex editors, unpackers, virtual machines, and network sniffers.
• Investigate instances of malicious code to determine attack vectors, payloads, and the extent of damage and data exfiltration, delivering actionable intelligence products that directly support national security missions.
• Perform static and dynamic analysis of mobile malware on Android and iOS platforms.
• Reverse engineer ARM/ARM64 binaries; unpack APK/IPA files, bypass runtime protections, and conduct reverse engineering of known and suspected malware files.
• Identify C2 infrastructure, persistence mechanisms, and indicators of compromise (IOCs); investigate attack vectors, payloads, and the extent of data exfiltration.
• Identify vulnerabilities in binaries, analyze shellcode, and recommend preventative or defensive actions.
• Develop custom tooling, automation scripts, and YARA detection signatures; build network and host‑based signatures and recommend heuristic or anomaly‑based detection methods.
• Produce technical reports with MITRE ATT&CK for Mobile mappings, remediation recommendations, and detailed documentation of malware behavior and command‑and‑control infrastructure.
• Perform ongoing research into malicious software, emerging vulnerabilities, and exploitation tactics to stay ahead of evolving threats.
• Collaborate with forensics, vulnerability research, and cyber operations teams.

Skills

ARM/ARM64 assembly

Mobile OS internals (Android/iOS)

Python scripting

Java/Kotlin/Swift familiarity

Top Secret with SCI eligibility

Education

Bachelor's/Master's/PhD in Cybersecurity, CS, Software Engineering, IT or related

Tools

Ghidra

IDA Pro

Jadx

Frida

MobSF

Corellium

Job description

Allyon is hiring a Mobile Malware Engineer in Linthicum Heights, MD to support the U.S. Air Force and DC3. Responsibilities include malware reverse engineering, static/dynamic analysis on Android/iOS, and developing tooling to detect and defeat threats.

Requires Top Secret with SCI eligibility, advanced degrees, and strong reverse-engineering experience. The role is full-time with competitive compensation and comprehensive benefits.