T

Trellix

XDR security platform for threat detection

Reverse Engineer - Android

Offensive Security & TestingPosted on Nov 12
Full-timeRemote in USANo salary listedRemote

About the Job

Requirements

  • A minimum of 3–5+ years of expertise in one or more of Android development, reverse engineering, penetration testing, application security assessments, or Capture the Flag (CTF).
  • Hands-on experience analyzing, unpacking, and reverse engineering code from malicious applications or SDKs.
  • Experience with static and dynamic analysis techniques.
  • Experience using reverse engineering tools such as Jadx, Ghidra, Frida, IDA Pro, and Burp for binary and APK analysis.
  • Experience with Java, Kotlin, JavaScript, Flutter, and other mobile software languages.
  • Experience with ELF native-binary reverse engineering.
  • Experience developing signatures such as SQL and Yara.
  • Understanding of Android fundamentals, including activity lifecycles, common Android API usage, AOSP, and how Android applications are created.
  • Understanding of techniques malicious applications use to harm users' devices or data.
  • Understanding of mobile app store policies covering ads, potentially harmful applications, and developers.
  • Understanding of network traffic analysis and security fundamentals.
  • Experience researching threats such as advanced persistent threats using open-source intelligence sources such as VirusTotal, the web, ExploitDB, and MITRE.
  • Understanding of encoding and cryptography.
  • Understanding of authentication mechanisms and security.
  • Understanding of device rooting.
  • Understanding of complex frameworks and application packers.

Responsibilities

  • Conduct in-depth analysis of Android applications and SDKs to understand their codebase, architecture, and functionality and identify potential risks.
  • Use reverse engineering techniques, including decompilation, disassembly, and debugging, to extract information from codebases.
  • Identify user and device risks, data leakage, and malicious code execution within Android apps and SDKs.
  • Gather, analyze, and report threat intelligence related to Android malware, exploits, and emerging security trends.
  • Collaborate with security researchers, developers, and other stakeholders to share findings, provide recommendations, and contribute to developing secure applications and ecosystems.

Desired Qualifications

  • Familiarity with Android fundamentals, including activity lifecycles, common Android API usage, AOSP, and how Android applications are created.
  • Understanding of techniques malicious applications use to harm users' devices or data.
  • Knowledge of mobile app store policies covering ads, potentially harmful applications, and developers.
  • Knowledge of network traffic analysis and security fundamentals.
  • Experience researching threats such as advanced persistent threats using open-source intelligence sources such as VirusTotal, the web, ExploitDB, and MITRE.
  • Understanding of encoding and cryptography.
  • Understanding of authentication mechanisms and security.
  • Understanding of device rooting.
  • Understanding of complex frameworks and application packers.

About the Company

Trellix

XDR security platform for threat detection

Trellix provides an open, native extended detection and response (XDR) platform that unifies endpoint, network, and cloud security, sold with hardware, software, and services such as threat intelligence, incident response, and risk management. The product combines multiple security tools into one system and uses Generative AI to enhance threat detection and response for SecOps teams. Its differentiators include an open, native platform that integrates tools across environments and AI-assisted automation, backed by the combined expertise of McAfee Enterprise and FireEye. The goal is to help organizations manage cybersecurity threats more effectively with a scalable, unified solution that blends technology, intelligence, and professional services.

Company size
1,001-5,000
Company stage
Growth Equity (Venture Capital)
Total funding
$400M
Headquarters
Plano, TX
Founded
2021

Recently Posted Jobs

Explore more opportunities at Trellix

See more jobs