Android Reverse Engineer

About the role

Trellix, a global cybersecurity company, is seeking Android App and SDK Reverse Engineers to join its global Google Reverse Engineering program. The role involves analysing and deconstructing Android applications and SDKs to identify security risks and understand their underlying functionality. It is a remote position based in Singapore.

Key responsibilities

• Analyse Android applications and SDKs in depth to understand their codebase, architecture and functionality, and identify potential risks.
• Use reverse engineering techniques such as decompilation, disassembly and debugging to extract information from codebases.
• Identify user and device risk, data leakage and malicious code execution in Android apps and SDKs.
• Develop and maintain custom reverse engineering tools and scripts to automate tasks.
• Conduct security assessments of Android applications and SDKs.
• Gather, analyse and report threat intelligence on Android malware, exploits and emerging security trends.
• Collaborate with security researchers, developers and other stakeholders to share findings and recommend improvements.
• Stay up to date on Android security threats, vulnerabilities and reverse engineering techniques.

Required profile

• Minimum of 3 to 5 years of experience in Android development, reverse engineering, pentesting or application security assessments.
• Hands-on experience analysing, unpacking and reverse engineering malicious applications or SDKs.
• Ability to read, comprehend and analyse source code.
• Experience with static and dynamic analysis techniques.
• Experience with reverse engineering tools such as Jadx, Ghidra, Frida, IDA Pro and Burp for binary and APK analysis.
• Experience with ELF (native binaries) reverse engineering and query languages such as SQL.
• Participation in a mobile Capture the Flag (CTF) is mentioned as additional.

Required skills

• Android fundamentals: activity lifecycles, common Android API usage, AOSP and app creation.
• Malware techniques used to harm devices and data.
• Knowledge of mobile app store policies (ads, PHAs, developer policies).
• Network traffic analysis and security fundamentals.
• Languages: Java, Kotlin, JavaScript, Flutter and other mobile software languages.

What we offer

• Retirement plans.
• Medical, dental and vision coverage.
• Paid time off and paid parental leave.
• Social programs, flexible work hours and family-friendly benefits.