Remote Android Security Reverse Engineer

Trellix; Richmond (VA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Retirement Plans

Medical, Dental and Vision Coverage

Paid Time Off

Paid Parental Leave

Support for Community Involvement

Job summary

Trellix is seeking an experienced Android Reverse Engineer to support its global Android Reverse Engineering program. You will analyze Android applications and SDKs to uncover security risks and inform mitigations, working remotely across the United States.

The role requires 3–5+ years in Android development or reverse engineering, hands-on use of Jadx, Ghidra, Frida, IDA Pro, and Burp, and collaboration with researchers to strengthen Trellix's security posture.

Qualifications

• 3–5+ years of experience in Android development or reverse engineering.
• Hands-on analysis of malicious apps or SDKs.
• Experience with static and dynamic analysis techniques.
• Proficient with Jadx, Ghidra, Frida, IDA Pro, Burp.
• Proficiency in Java, Kotlin, JavaScript, Flutter.
• Experience with ELF reverse engineering.
• Experience developing detection signatures (SQL, Yara, etc.).

Responsibilities

• Conduct in-depth analysis of Android apps and SDKs to identify risks.
• Apply reverse engineering techniques including decompilation and debugging.
• Identify data leakage, malicious code execution, and device risk.
• Gather threat intelligence on Android malware and exploits.
• Collaborate with researchers and developers to share findings and improve security.

Skills

Android Development

Reverse Engineering

Pentesting

Application Security Assessments

CTF

Tools

Jadx

Ghidra

Frida

IDA Pro

Burp

Job description

Trellix is seeking an experienced Android Reverse Engineer to support its global Android Reverse Engineering program. You will analyze Android applications and SDKs to uncover security risks and inform mitigations, working remotely across the United States.

The role requires 3–5+ years in Android development or reverse engineering, hands-on use of Jadx, Ghidra, Frida, IDA Pro, and Burp, and collaboration with researchers to strengthen Trellix's security posture.