Android App Malware Reverse Engineer; Remote

OUR MISSION UNITES US

"Making the world a safer and more secure place." "

It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it.

We are always looking for people who share our mission to join us.

IOActive, a trusted partner for Global 1000 enterprises, provides research‑fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

An IOActive Android App Malware Reverse Engineer leverages their skills to make conclusive statements about specific security and privacy questions asked off selected Android Apps, as part of an effort to keep third‑party app stores safe. The candidate will be working at the highest escalation level, only handling engaging, challenging questions that could not be answered by lower malware analysis tiers.

The candidate will be part of a structured team, working with Technical Project Managers and Team Leads. The nature and scale of the work ensures a fast‑paced, dynamic and engaging environment, with a strong opportunity of further technical growth and training on the job.

• Reverse engineering of Android apps
• Java‑based apps
• Native code is a strong plus
• Work with the Android platform and its security mechanisms
• Conduct vulnerability assessments and penetration testing

• Ability to work independently under deadline
• Knowledge of security‑related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage
• Rigorous attention to detail and strong analytic skills