Mobile Threat Researcher/Engineer

Role & responsibilities

• Responsible for the security testing and evaluation of applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.
• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.
• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.
• Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company.
• Collaborate with team members to conduct application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities.

Requirements :

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.
• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.
• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc with strong malicious sample analysis capabilities.
• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).
• Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch).
• Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with can-do” attitude and good work ethics, strong learning ability, and innovative thinking.