Mobile Malware Engineer-Senior

NetSage; Linthicum (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

NetSage is a mission-focused partner advancing national security through exceptional cyber expertise. We seek a Senior Mobile Malware Engineer to assess mobile threats on Android and iOS, perform reverse engineering, and develop detection capabilities to strengthen defense and operations.

The ideal candidate has extensive experience analyzing malicious mobile code, communicates findings clearly to technical and non-technical audiences, and can work across security teams in a government

Qualifications

• Bachelor of Science in Computer Science or related field required with eight years of relevant experience; MS with six years; or senior without degree with twelve years.
• Strong understanding of ARM/ARM64 architectures and low-level binary analysis.
• Experience with Android/iOS internals and malware analysis platforms; able to communicate complex findings.

Responsibilities

• Assess sophisticated mobile malware targeting Android and iOS.
• Develop detection capabilities and analytic tooling to strengthen cyber defense.
• Communicate technical findings clearly to both technical and non-technical audiences.

Skills

ARM/ARM64 analysis

Binary analysis

Reverse engineering

Python scripting

Java/Kotlin/Swift

Technical communication

Education

BS in Computer Science

MS in Computer Science

Tools

Ghidra

IDA Pro

Jadx

Frida

MobSF

Corellium

Job description

At NetSage, we are more than a government contractor- we are a mission-focused partner dedicated to advancing national security through exceptional cyber expertise. We believe our success begins with our people, which is why we invest in and care for our employees. We know that employee retention is mission continuity, and we are committed to building long-term careers where our people can grow alongside our customers' evolving missions. Our employees enjoy meaningful work, competitive compensation, outstanding benefits, and opportunities to expand their skills across multiple mission areas.

Job Description

We are seeking a Senior Mobile Malware Engineer to assess sophisticated malware targeting Android and iOS devices. In this role, you will leverage advanced reverse engineering techniques and malware analysis methodologies to understand mobile threats, develop detection capabilities, and provide technical insight that strengthens cyber defense and mission operations. The ideal candidate for this position will have extensive experience analyzing malicious mobile code and developing innovative solutions to identify and mitigate emerging threats.

Required Qualifications

• Top secret security clearance with SCI eligibility.
• A Bachelor of Science (B.S.) degree in Computer Science or a related field and eight (8) years of relevant experience. Also acceptable are a Master of Science (M.S.) degree and six (6) years or no degree and twelve (12) years of relevant experience.
• Strong understanding of ARM and ARM64 architectures with demonstrated experience performing low-level binary analysis.
• Knowledge of Android and iOS operating system internals, including application packaging formats, runtime environments, and executable file structures.
• Experience using reverse engineering and mobile analysis platforms such as Ghidra, IDA Pro, Jadx, Frida, MobSF, and Corellium.
• Proficiency developing scripts in Python, with working knowledge of Java, Kotlin, or Swift.
• Demonstrated ability to investigate sophisticated malware and communicate technical findings to both technical and non-technical audiences.

Desired Qualifications

• Background supporting offensive cyber operations, exploit development, or CNO programs.
• Familiarity with advanced persistent threat (APT) groups and their use of mobile malware.
• Experience securing or assessing Mobile Device Management (MDM) or Enterprise Mobility Management (EMM) environments.
• Knowledge of mobile forensic platforms, including Cellebrite or Oxygen Forensics.
• Contributions to mobile security research, vulnerability disclosures, published technical papers, open-source security tools, or assigned CVEs.
• One or more of the following certifications:
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA SecurityX
  • GIAC Reverse Engineering Malware (GREM)
  • eLearnSecurity Mobile Application Penetration Tester (eMAPT)
  • GIAC Mobile Device Security Analyst (GMOB)
  • Offensive Security Exploit Developer (OSED)
  • Offensive Security Certified Professional (OSCP)