Reverse Engineer - Android

trellix; USA; Remote; USD 110.000 - 170.000; Vollzeit

Benefits dieser Stelle

Flexible work hours

Retirement plans

Medical, dental and vision coverage

Paid time off

Paid parental leave

Community involvement programs

Zusammenfassung

Trellix is seeking a mobile threat researcher to investigate Android applications and SDKs, analyzing how they work and where security risks arise for users and devices. You will contribute to a mobile threat research program by examining suspicious software, documenting findings, and coordinating with researchers and developers to improve security.

Responsibilities include reverse engineering, unpacking malware, identifying data leakage, and developing detection signatures.

Qualifikationen

• 3–5+ years in Android development or security.
• Experience reversing malicious apps or SDKs.
• Proficiency with static and dynamic analysis methods.

Aufgaben

• Analyze and reverse engineer Android apps and SDKs.
• Unpack and inspect malicious software using decompilation and debugging.
• Identify data leakage and malicious activity.
• Develop detection signatures and rules.
• Collaborate with researchers and developers to share recommendations.

Kenntnisse

Android development

Reverse engineering

Penetration testing

Application security

CTF experience

Tools

JADX

Ghidra

Frida

IDA Pro

Burp Suite

Jobbeschreibung

Investigate Android applications and software development kits to understand how they work and identify security risks to users, devices, and data. You will contribute to a mobile threat research program by analyzing suspicious software, documenting findings, and working with researchers and developers to improve security.

Responsibilities

• Analyze and reverse engineer Android apps and SDKs using static and dynamic techniques.
• Unpack and inspect malicious applications, using decompilation, disassembly, and debugging to understand their behavior.
• Identify data leakage, harmful device activity, and malicious code execution.
• Research Android malware, exploits, and emerging threats, then report useful findings.
• Collaborate with security researchers and developers and share recommendations.
• Develop detection signatures, including SQL or YARA rules.

Requirements

• Three to five or more years of relevant experience in Android development, reverse engineering, penetration testing, application security, or CTF work.
• Hands‑on experience analyzing and reverse engineering malicious apps or SDKs.
• Familiarity with tools such as JADX, Ghidra, Frida, IDA Pro, or Burp for APK and binary analysis.
• Programming experience with Java, Kotlin, JavaScript, Flutter, or other mobile technologies.
• Ability to analyze native ELF binaries and apply static and dynamic analysis methods.

Nice to have

• Knowledge of Android fundamentals, app lifecycles, APIs, and AOSP.
• Familiarity with mobile network traffic, security, authentication, cryptography, rooting, packers, and app store policies.
• Experience researching threats through open‑source intelligence and security resources.

Benefits and work setup

• flexible work hours
• retirement plans
• medical, dental and vision coverage
• paid time off
• paid parental leave
• community involvement programs