At Trellix, we believe the best solutions are developed by teams who embrace unique experiences, skills, and abilities. We are looking for a Solution Consultant specializing in Android Reverse Engineering to support our global program. In this role, you will conduct deep-dive analysis to identify security risks and understand the functionality of Android applications and SDKs.
What You'll Do
- Conduct in-depth analysis of Android applications and SDKs to understand codebase, architecture, functionality, and identify potential risks.
- Employ advanced reverse engineering techniques including decompilation, disassembly, and debugging.
- Identify user and device risk, data leakage, and malicious code execution within Android apps and SDKs.
- Gather, analyze, and report threat intelligence related to Android malware, exploits, and emerging security trends.
- Collaborate with security researchers, developers, and stakeholders to share findings and provide recommendations.
What We're Looking For
- Minimum 3-5+ years expertise in Android Development, Reverse Engineering, Pentesting, Application Security Assessments, or Capture the Flag (CTF).
- Hands-on experience analyzing, unpacking, and reverse engineering code of malicious applications or SDKs.
- Experience with static and dynamic analysis techniques.
- Experience with reverse engineering tools such as Jadx, Ghidra, Frida, IDA Pro, Burp.
- Knowledge of Java, Kotlin, JavaScript, Flutter, and other mobile software languages.
- Experience with ELF (Native Binaries) reverse engineering.
- Experience developing signatures (SQL, Yara, etc.).
Nice to Have
- Understanding of Android Fundamentals: Android activity lifecycles, common Android API usage, AOSP, and how an Android application is created.
- Knowledge of techniques utilized by malicious applications to harm the user’s device or their data.
- Understanding of Mobile App store policies (Ads, PHAs, Developer, etc.).
- Knowledge of network traffic analysis and security fundamentals.
- Experience researching threats such as APT using Open-Source Intelligence (Virus Total, Web, ExploitDB, MITRE, etc.).
- Knowledge of encoding and cryptography.
- Understanding of authentication mechanisms and security.
- Knowledge of device rooting.
- Understanding of complex frameworks and application packers.
Technical Stack
- Reverse Engineering: Jadx, Ghidra, Frida, IDA Pro, Burp
- Languages & Frameworks: Java, Kotlin, JavaScript, Flutter
Benefits & Compensation
- Retirement Plans
- Medical, Dental and Vision Coverage
- Paid Time Off
- Paid Parental Leave
- Support for Community Involvement
We prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.
