4 days ago
Remote, United StatesMid Level / Senior
Responsibilities
- Analyze and deconstruct Android applications and SDKs to understand their code, architecture, functionality, and security risks.
- Use decompilation, disassembly, debugging, unpacking, static analysis, dynamic analysis, and binary/APK analysis techniques.
- Identify user and device risks, data leakage, malicious code execution, and threats in Android apps and SDKs.
- Research and report threat intelligence related to Android malware, exploits, APTs, and emerging security trends.
- Collaborate with security researchers, developers, and stakeholders to share findings and recommend improvements.
- Develop signatures using technologies such as SQL and YARA.
Requirements
- Have 3–5+ years of experience in Android development, reverse engineering, penetration testing, application security assessments, or Capture the Flag activities.
- Have hands-on experience analyzing, unpacking, and reverse engineering malicious applications or SDKs.
- Have experience with Jadx, Ghidra, Frida, IDA Pro, and Burp for reverse engineering and binary/APK analysis.
- Have experience with Java, Kotlin, JavaScript, Flutter, and other mobile software languages.
- Have experience reverse engineering ELF native binaries.
- Understand Android activity lifecycles, common Android API usage, AOSP, and Android application creation.
- Understand malicious application techniques, mobile app store policies, network traffic analysis, security fundamentals, threat intelligence, encoding, cryptography, authentication, device rooting, frameworks, and application packers.
Benefits
- Retirement plans.
- Medical, dental, and vision coverage.
- Paid time off.
- Paid parental leave.
- Support for community involvement.
- Flexible work hours and family-friendly benefits.
- The posting does not specify a work arrangement or location.
Tech Stack
Categories
About Trellix
Trellix is a global cybersecurity company delivering intelligence-led cyber resilience for security-conscious organizations at any stage of their journey. Transforming over 30 years of threat intelligence into high-fidelity detections and automating AI-driven detection and response across cloud, on-premises, air-gapped, and operational technology environments, Trellix helps customers adapt to the constantly evolving threat landscape. More at https://trellix.com.