Senior/ Lead Security Researcher

V-Key Pte Ltd; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

V-Key Pte Ltd, a leading mobile cybersecurity innovator, is seeking a Senior or Lead Security Researcher to join the Product Security Team. You will focus on cutting-edge R&D of threats on mobile devices to develop protective products and robust defenses.

You will research threats such as root/jailbreak, app tampering, and runtime tampering across Android, iOS, and Harmony OS Next, and collaborate on protective architectures, threat modeling, and demonstrations for customers.

Qualifications

• Minimum 5+ years of relevant security research experience.
• Strong knowledge of mobile OS internals (Android/iOS/Linux).
• Experience with rooting/jailbreaking detection and evasion.
• Proficient with reverse engineering and attack tooling (Frida, Theos, Ghidra, IDA Pro).
• Experience with web VAPT tools like Burp Suite.
• Ability to innovate beyond using tools as-is and model threats.
• Experience with threat modelling frameworks.
• Self-starter with minimal supervision and project ownership.
• Mentor junior security researchers.
• Detail-oriented, systematic, and able to work in a fast-moving environment.
• Strong communication and teamwork skills.

Responsibilities

• Research threats in mobile OS and apps across Android/iOS/Harmony OS Next.
• Develop protection mechanisms via reverse engineering, vulnerability research, and mitigations.
• Conduct penetration testing on company products and applications.
• Script attacks and defenses for mobile devices and apps.
• Create customer-facing security demonstrations of attacks and defenses.
• Contribute to security architectures involving networked components and authentication protocols.

Skills

5+ years of experience

OS internals

rooting/jailbreak

reverse engineering

Frida

Theos

Ghidra

IDA Pro

Burp Suite

threat modelling

self-starter

mentoring

communication

team player

Education

Degree in CS / Info Systems / Math

Tools

Frida

Theos

Ghidra

IDA Pro

Burp Suite

Job description

Summary of RoleV-Key is one of the world’s leading deep-tech companies in mobile cyber-security. Our patented technology V-OS has been deployed by top banks, mobile payment providers, and governments to secure software solutions and protect more than 500 million users globally.

We are rapidly expanding into new markets and new customer segments. Apart from securing digital transactions for everyone, we are also enabling new generation technology by providing the cyber-security infrastructure for banking, government and smart homes, among many others.

At the company, we are building towards a future where technology users can enjoy unprecedented security and convenience.

We are looking for a (Senior or Lead) Security Researcher, as part of the Product Security Team. Your primary focus will be to work with the team on cutting-edge Research and Development (R&D) of threats on mobile phones to develop innovative products and solutions to defend against such threats.

Duties and Responsibilities

• Research into threats (such as root/jailbreak and hiding thereof, app tampering, runtime tampering, etc.) in mobile phone operating systems and applications on Android / iOS / Harmony OS Next.
• Work with the team to develop protection mechanisms through reverse engineering, vulnerability research, exploitation and mitigation techniques and mobile/embedded development.
• Work with the team to perform penetration test on the company’s products and applications.
• Work with the team to script attacks and defences for mobile devices in general and for mobile applications.
• Develop customer-facing security attack and defense demonstrations.
• Work with the team on security solutions architectures involving not just the mobile device, but also other networked components, leveraging authentication protocols (OAuth2, FIDO2, etc.), and understanding and assessing cryptographic protocols and algorithms as needed.

Requirements

• Should have 5+years of experience into this relevant field.
• Good understanding of operating system internals (one or more of Android, iOS, Harmony OS Next, Linux, etc.) and app development (especially mobile).
• Familiar with rooting/jailbreaking, runtime tampering, app tampering, and tools that can be used to hide them.
• Familiar with attack and reverse engineering tools such as Frida, Theos, Ghidra, and IDA Pro.
• Familiar with web VAPT tools like Burp Suite.
• Familiar with how various tools/methodologies work, allowing innovation and creative solutions, not just comfortable using the tools as is.
• Good understanding of threat modelling, including familiarity with at least one threat modelling framework.
• A strong self-starter and able to work with minimal supervision, while still receptive to suggestions and ways to improve.
• Project ownership on selected projects.
• Guidance/mentorship of junior security researchers.
• Detail oriented with a strong focus on quality.
• Systematic and methodical in research and testing, while being creative and innovative.
• Ability to work in a dynamic, fast moving and growing environment.
• Positive work attitude, proactive and highly driven.
• Critical thinker and problem-solving skills.
• Team player with great interpersonal and communication skills.

Nice to have

• Degree in Computer Science, Information Systems, Math (especially related to cryptography) or related field.
• Certifications related to information security, ethical hacking, security solution design.
• Have built tools/scripts to help with various security research tasks.