Remote Android Security Researcher and Reverse Engineer

Trellix US LLC; United States; Remote; USD 110,000 - 180,000; Full time

Job summary

Trellix US LLC is seeking a security-focused analyst to analyze Android applications and SDKs, uncovering how they work and identifying risks to users, devices, and data. The role combines static and dynamic analysis, reverse engineering, and threat research, with findings shared across security and development teams.

Remote within the United States. You will decompile, disassemble, and debug software to investigate functionality, identify data leakage and malicious code execution, and document

Qualifications

• At least 3–5 years of relevant experience in Android development, reverse engineering, penetration testing, application security assessments, or capture-the-flag work.
• Hands-on experience analyzing, unpacking, and reverse engineering malicious apps or SDKs.
• Familiarity with static and dynamic analysis methods and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Experience with Java, Kotlin, JavaScript, Flutter, or other mobile development languages.
• Ability to reverse engineer ELF native binaries and develop detection signatures, such as SQL or YARA rules.

Responsibilities

• Examine Android apps and SDKs to understand their architecture, behavior, and potential security issues.
• Decompile, disassemble, and debug software to investigate functionality and extract relevant details.
• Identify data leakage, risks to users or devices, and malicious code execution.
• Research Android malware, exploits, and emerging mobile security threats, then document findings.
• Share analysis and recommendations with researchers, developers, and other stakeholders.

Skills

Android development

Reverse engineering

Penetration testing

App security assessments

Static analysis

Dynamic analysis

Java

Kotlin

JavaScript

Flutter

Tools

JADX

Ghidra

Frida

IDA Pro

Burp

Job description

Trellix US LLC is seeking a security-focused analyst to analyze Android applications and SDKs, uncovering how they work and identifying risks to users, devices, and data. The role combines static and dynamic analysis, reverse engineering, and threat research, with findings shared across security and development teams.

Remote within the United States. You will decompile, disassemble, and debug software to investigate functionality, identify data leakage and malicious code execution, and document