3 days ago
Remote, Singapore +2 moreMid Level / Senior
Responsibilities
- Analyze Android applications and SDKs to understand their code, architecture, functionality, and potential risks.
- Use decompilation, disassembly, debugging, static analysis, and dynamic analysis for reverse engineering.
- Identify user and device risk, data leakage, malicious code execution, and other security issues.
- Develop and maintain custom reverse-engineering tools and scripts to automate analysis tasks.
- Conduct security assessments of Android applications and SDKs.
- Gather, analyze, and report threat intelligence related to Android malware, exploits, and emerging security trends.
- Collaborate with security researchers, developers, and stakeholders to share findings and recommend secure software practices.
- Stay current on Android security threats, vulnerabilities, and reverse-engineering techniques.
Requirements
- Minimum 3–5+ years of experience in Android development, reverse engineering, pentesting, or application security assessments.
- Hands-on experience analyzing, unpacking, and reverse engineering malicious applications or SDKs.
- Ability to read, comprehend, and analyze source code.
- Experience with static and dynamic analysis techniques.
- Experience with Jadx, Ghidra, Frida, IDA Pro, and Burp for binary and APK analysis.
- Knowledge of Java, Kotlin, JavaScript, Flutter, and other mobile software languages.
- Experience reverse engineering ELF native binaries.
- Experience with query languages such as SQL.
- Participation in a mobile-software Capture the Flag event.
- Understanding of Android activity lifecycles, common Android API usage, AOSP, and Android application creation is highly valued.
- Understanding of malicious-software techniques, mobile app-store policies, network traffic analysis, and security fundamentals is highly valued.
Benefits
- Retirement plans.
- Medical, dental, and vision coverage.
- Paid time off.
- Paid parental leave.
- Support for community involvement.
- Flexible work hours and family-friendly benefits.
Tech Stack
Categories
About Trellix
Trellix is a global cybersecurity company delivering intelligence-led cyber resilience for security-conscious organizations at any stage of their journey. Transforming over 30 years of threat intelligence into high-fidelity detections and automating AI-driven detection and response across cloud, on-premises, air-gapped, and operational technology environments, Trellix helps customers adapt to the constantly evolving threat landscape. More at https://trellix.com.