Malware Reverse Engineer - Android

At Reversec, we deliver research-led cyber security services that help organisations defend against real-world threats and build long-term resilience. Our consultants are a diverse team of highly skilled technical experts, researchers, and creative problem-solvers who are passionate about advancing the cyber security industry.

We believe great consultants are empowered consultants. Our people take ownership of their professional development, contribute to meaningful research, and have the freedom to shape the way we work. If you're driven by curiosity, enjoy solving complex technical challenges, and thrive in an environment that values innovation and continuous learning, we'd love to hear from you.

Reversec is a specialist security consultancy built on deep technical expertise, research, and real-world security engineering. Our consultants regularlyanalysehighly obfuscated software, reverse engineer complex applications, develop custom tooling, and contribute to open-source security projects used throughout the industry. Reversec maintains Android securitytoolingsuch as Drozerand invests heavily in research-led capability development.

We are seeking Android reverse engineers and malware analysts across all experience levels (from those building their skills to seasoned experts) to join a specialist team supporting one of the world's largest technology platforms.

As an Android Malware Reverse Engineering Analyst, you will investigate complex and evasive Android applications,identify malicious functionality, conduct detailed reverse engineering, and support automated detection development.

You will work as part of a specialist malware analysis team responsible for investigating applications that fall outside standard analysis processes and require advanced technical expertise. This includes malware research, incident investigations, escalation handling, detection engineering, and quality assurance activities.

We'rerecruiting analysts across multiple career stages, from aspiring reverse engineers to experienced malware researchers. Your responsibilities and the expectations placed on you will depend directly on the experience you bring. Experienced analysts will take on complex samples and investigations with a high degree of independence, provide mentorship to junior team members, and assistin developing internal tooling and processes. Analysts earlier in their careers will carry out similar categories of work, with closer support and a remit that grows as their skills develop.

Wherever you start, training will be available to bring you up to the standard the team works to.

All analysts contribute across the areas below. The complexity of the cases assigned to you, the degree of independence expected of you,and any additional oversight and reporting duties will reflect your experience.

Perform detailed static and dynamic analysis of Android applications and SDKs.

Analyse heavily obfuscated Java/Kotlin applications,native code, and framework applications (e.g., Flutter, .NET MAUI,React Native).

Investigate packers, in-memory loading techniques, encrypted payloads and anti-analysis mechanisms.

Determine application behaviour and identify potentially harmful functionality.

Conduct complex investigations into suspicious applications and malware campaigns.

Support escalations and urgent high-priority investigations.

Analyse internal and external malware leads.

Identify indicators, behaviours, attack techniques and attacker objectives.

Develop and validate detection logic and automated rules.

Support improvements to malware detection capabilities.

Work with analysts and engineering teams to improve investigative efficiency.

Review analysis performed by other analysts.

Validate technical findings and enforcement decisions.

Ensure consistent technical standards and reporting quality.

Develop one-off tools, scripts and automation to support investigations.

Contribute to internal research initiatives.

Stay current with evolving Android threats, malware techniques and analysis methodologies.

We do not require a fixed profile. Instead, wewillcalibrate expectations to the experience you bring.

** In all cases, you will need:**

Strong programming fundamentals in at least one object-oriented language.

A genuine interest in Android internals and how malicious software works.

An investigative mindset– curiosity, persistence, and attention to detail.

Clear written and spoken communication in English.

If you are an experienced analyst, we expect proven experience in one or more of:
Android malware analysis, Android application security testing, mobile application reverse engineering, malware research, threat research, or mobile threat intelligence. You should be able to demonstrate skills across Java and Android internals, Smali and DEX analysis, Android application architecture, static and dynamic analysis…