Senior Android Malware Analyst (RARR Job 5555)

Minimum Qualifications:

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
• 3–5 years of experience in security assessments, security design reviews, or threat modeling.
• Experience in malware analysis, reverse engineering, and software development.

Preferred Qualifications:

• Proficiency with advanced reversing tools (e.g., IDA Pro, Ghidra).
• Ability to reverse-engineer heavily obfuscated code and native libraries.
• Capability to analyze and break custom cryptographic routines used by common malware.
• Expertise in threat identification, with the ability to accurately pinpoint malicious code and classify all categories of malicious applications.
• Experience in Android reverse engineering (APK, DEX), malware analysis, and threat modeling.
• Strong understanding of ARM-based architecture.
• Android application development experience in C/C++ and Java.
• Experience analysing app behaviour using automated tools and sandboxing environments to identify known malicious patterns.
• Foundational and in-depth technical knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.
• Experience in automation and scripting, preferably in Python.
• Ability to classify applications based on predefined Standard Operating Procedures (SOPs) and known threat indicators.

Responsibilities:

• Perform second-level reviews of complex threats and conduct security analysis on a high volume of Android applications.
• Conduct reverse engineering and analyse malware at scale.
• Document all analysis findings accurately and concisely for reporting and tracking purposes.
• Advocate for secure development practices and security-first approaches.
• Conduct research to identify emerging attack vectors targeting Android platforms.
• Collaborate with team members to enhance Android Security and Privacy’s understanding of malware, and propose methods for detection and mitigation.
• Mentor and train team members; lead knowledge-sharing sessions to upskill the broader team.