1 day ago
Remote, United StatesMid Level / Senior
Responsibilities
- Conduct in-depth analysis of Android applications and SDKs to understand their code, architecture, functionality, and security risks.
- Use decompilation, disassembly, debugging, unpacking, static analysis, and dynamic analysis techniques.
- Identify user and device risks, data leakage, and malicious code execution.
- Analyze Android malware, exploits, malicious applications, and SDKs.
- Gather, analyze, and report threat intelligence on Android threats and emerging security trends.
- Perform binary and APK analysis using reverse engineering tools.
- Develop detection signatures using technologies such as SQL and YARA.
- Collaborate with security researchers, developers, and other stakeholders to share findings and recommend security improvements.
Requirements
- A minimum of 3–5+ years of experience in Android development, reverse engineering, penetration testing, application security assessments, or Capture the Flag activities.
- Hands-on experience analyzing, unpacking, and reverse engineering malicious applications or SDKs.
- Experience with Jadx, Ghidra, Frida, IDA Pro, and Burp for binary and APK analysis.
- Experience with Java, Kotlin, JavaScript, Flutter, and other mobile software languages.
- Experience reverse engineering ELF native binaries.
- Understanding of Android activity lifecycles, common Android API usage, AOSP, and Android application creation.
- Knowledge of malicious application techniques, mobile app store policies, network traffic analysis, security fundamentals, encoding, cryptography, authentication mechanisms, device rooting, application packers, and complex frameworks.
- Experience researching threats such as APTs using VirusTotal, the web, ExploitDB, and MITRE is appreciated.
Benefits
- Retirement plans.
- Medical, dental, and vision coverage.
- Paid time off.
- Paid parental leave.
- Support for community involvement.
- Flexible work hours and family-friendly benefits.
Tech Stack
Categories
About Trellix
Trellix is a global cybersecurity company delivering intelligence-led cyber resilience for security-conscious organizations at any stage of their journey. Transforming over 30 years of threat intelligence into high-fidelity detections and automating AI-driven detection and response across cloud, on-premises, air-gapped, and operational technology environments, Trellix helps customers adapt to the constantly evolving threat landscape. More at https://trellix.com.