Reverse Engineer - Android

102 Musarubra US, LLC; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

102 Musarubra US, LLC is seeking a security-focused mobile expert to investigate Android apps and SDKs, identify risks, and contribute to threat intelligence. You will use reverse engineering and analysis to reveal data exposure, malicious execution, and security gaps.

You will collaborate with researchers, developers, and stakeholders to translate findings into actionable guidance for security and development teams.

Qualifications

• 3–5 years of experience in Android development, reverse engineering, pentesting, app security assessment, or CTF work.
• Practical experience unpacking and reverse engineering malicious Android apps or SDKs.
• Familiarity with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile languages.
• Experience analyzing native ELF binaries and writing detection signatures such as SQL or YARA rules.

Responsibilities

• Analyze Android apps and SDKs to map their code, architecture, and runtime behavior.
• Use decompilation, disassembly, and debugging to investigate software and extract evidence about its operation.
• Detect potential harm to users or devices, data leakage, and malicious code execution.
• Research Android malware, exploits, and developing security trends, and report findings.
• Collaborate with researchers, developers, and other stakeholders to share conclusions and recommend improvements.

Skills

Android development

Reverse engineering

Penetration testing

Application security assessment

CTF

Tools

JADX

Ghidra

Frida

IDA Pro

Burp

Job description

Role overview

Investigate Android applications and SDKs to understand their design and behavior, uncover security risks, and contribute to mobile threat intelligence. The work uses reverse engineering and analysis to identify issues such as data exposure or malicious execution, then turns findings into useful guidance for security and development partners.

Responsibilities

• Analyze Android apps and SDKs to map their code, architecture, and runtime behavior.
• Use decompilation, disassembly, and debugging to investigate software and extract evidence about its operation.
• Detect potential harm to users or devices, data leakage, and malicious code execution.
• Research Android malware, exploits, and developing security trends, and report findings.
• Collaborate with researchers, developers, and other stakeholders to share conclusions and recommend improvements.

Requirements

• At least 3–5 years of experience in one or more of Android development, reverse engineering, penetration testing, application security assessment, or CTF work.
• Practical experience unpacking and reverse engineering malicious Android apps or SDKs.
• Skill with static and dynamic analysis and tools such as JADX, Ghidra, Frida, IDA Pro, or Burp.
• Familiarity with Java, Kotlin, JavaScript, Flutter, or other mobile languages.
• Experience analyzing native ELF binaries and writing detection signatures such as SQL or YARA rules.

Nice to have

• Understanding of Android app lifecycles, APIs, AOSP, app construction, and mobile store policies.
• Knowledge of techniques used to compromise devices or data, plus network traffic analysis and security fundamentals.
• Familiarity with encoding, cryptography, authentication, and open-source threat research.