Mobile Malware Engineer — On-Site, TS/SCI Eligible

Apex Systems; Linthicum (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Everforth Apex is seeking a Mobile Malware Engineer to analyze and reverse engineer malware on Android and iOS. You will assess attack vectors, payloads, and data exfiltration, supporting a federal customer with emphasis on iOS/macOS. On-site in Linthicum, MD, with a strong emphasis on static/dynamic analysis and tooling.

The role requires DoD Top Secret/SCI eligibility, strong iOS/macOS experience, and proficiency with low-level analysis tools.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, or related field.
• 8 years of experience, or 6 years with a Master's degree.
• Experience with iOS, MacOS and Android; preference for iOS.
• Proficiency in ARM/ARM64 assembly and low-level binary analysis.
• Hands-on with Ghidra, IDA Pro, Jadx, Frida, MobSF, or Corellium.
• Scripting in Python; familiarity with Java, Kotlin, or Swift.
• CompTIA Security+ certification is required.

Responsibilities

• Perform static and dynamic analysis of mobile malware on Android and iOS.
• Reverse engineer ARM/ARM64 binaries and unpack APK/IPA files.
• Identify C2 infrastructure, persistence mechanisms, and IOCs.
• Identify vulnerabilities in binaries and suggest defensive actions.
• Develop tooling, automation scripts, and YARA signatures.
• Produce MITRE ATT&CK for Mobile mappings and remediation reports.
• Research evolving malware techniques and coordinate with teams.

Skills

ARM/ARM64 assembly

Binary analysis

Ghidra

IDA Pro

Jadx

Frida

MobSF

Corellium

Python

Swift

Java/Kotlin

Education

Bachelor's degree in Cybersecurity

Master's degree in related field

Tools

Ghidra

IDA Pro

Jadx

Frida

MobSF

Corellium

Job description

Everforth Apex is seeking a Mobile Malware Engineer to analyze and reverse engineer malware on Android and iOS. You will assess attack vectors, payloads, and data exfiltration, supporting a federal customer with emphasis on iOS/macOS. On-site in Linthicum, MD, with a strong emphasis on static/dynamic analysis and tooling.

The role requires DoD Top Secret/SCI eligibility, strong iOS/macOS experience, and proficiency with low-level analysis tools.