Reverse Engineer – Android

Trellix US LLC; USA; Remote; USD 110.000 - 180.000; Vollzeit

Zusammenfassung

Trellix US LLC is seeking a security-focused analyst to analyze Android applications and SDKs, uncovering how they work and identifying risks to users, devices, and data. The role combines static and dynamic analysis, reverse engineering, and threat research, with findings shared across security and development teams.

Remote within the United States. You will decompile, disassemble, and debug software to investigate functionality, identify data leakage and malicious code execution, and document

Qualifikationen

• At least 3–5 years of relevant experience in Android development, reverse engineering, penetration testing, application security assessments, or capture-the-flag work.
• Hands-on experience analyzing, unpacking, and reverse engineering malicious apps or SDKs.
• Familiarity with static and dynamic analysis methods and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Experience with Java, Kotlin, JavaScript, Flutter, or other mobile development languages.
• Ability to reverse engineer ELF native binaries and develop detection signatures, such as SQL or YARA rules.

Aufgaben

• Examine Android apps and SDKs to understand their architecture, behavior, and potential security issues.
• Decompile, disassemble, and debug software to investigate functionality and extract relevant details.
• Identify data leakage, risks to users or devices, and malicious code execution.
• Research Android malware, exploits, and emerging mobile security threats, then document findings.
• Share analysis and recommendations with researchers, developers, and other stakeholders.

Kenntnisse

Android development

Reverse engineering

Penetration testing

App security assessments

Static analysis

Dynamic analysis

Java

Kotlin

JavaScript

Flutter

Tools

JADX

Ghidra

Frida

IDA Pro

Burp

Jobbeschreibung

Role overview

Analyze Android applications and software development kits to uncover how they work and identify security risks to users, devices, and data. The work combines static and dynamic analysis, reverse engineering, and threat research, with findings shared across security and development teams. The position is remote within the United States.

Responsibilities

• Examine Android apps and SDKs to understand their architecture, behavior, and potential security issues.
• Decompile, disassemble, and debug software to investigate functionality and extract relevant details.
• Identify data leakage, risks to users or devices, and malicious code execution.
• Research Android malware, exploits, and emerging mobile security threats, then document findings.
• Share analysis and recommendations with researchers, developers, and other stakeholders.

Requirements

• At least 3–5 years of relevant experience in Android development, reverse engineering, penetration testing, application security assessments, or capture-the-flag work.
• Hands-on experience analyzing, unpacking, and reverse engineering malicious apps or SDKs.
• Familiarity with static and dynamic analysis methods and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Experience with Java, Kotlin, JavaScript, Flutter, or other mobile development languages.
• Ability to reverse engineer ELF native binaries and develop detection signatures, such as SQL or YARA rules.

Nice to have

• Knowledge of Android fundamentals, including app lifecycles, APIs, AOSP, and application packaging.
• Understanding of mobile app store policies, network traffic analysis, security fundamentals, encoding, cryptography, and authentication.
• Experience researching advanced threats using open-source intelligence sources.