Mobile Security R&D Engineer

We’re looking for a full-time Mobile Security R&D Engineer with technical expertise in Android and/or iOS internals, reverse engineering, and application security. You will be part of our R&D team, working on novel techniques to detect, prevent, and respond to mobile attacks in real-time. This is a hands-on role where you will contribute to the design, prototyping, and deployment of advanced security features for our mobile security products.

What you'll do

• Research emerging attack vectors targeting Android and iOS platforms and suggest proactive mitigations.
• Investigate mobile malware, fraud apps, rootkits/jailbreak tools, and their evasion techniques.
• Develop countermeasures against static and dynamic analysis techniques.
• Develop low-level protections using C/C++, Java, and Objective-C/Swift.
• Contribute to internal tools development and CI/CD security automation.
• Write technical blog posts, white papers, and present team research findings at security conferences.
• Analyze and adapt RASPIRE products to the changes and updates in the Android/iOS ecosystem.
• Support customers with product implementations, integrations, and troubleshooting.

What we're looking for

• Experience in Android/iOS security, reverse engineering, or mobile R&D.
• Experience with C/C++/Objective-C, Java/Swift, and JNI/NDK.
• Strong reverse engineering and binary instrumentation skills (e.g., Ghidra, IDA, Hopper, LLDB, Frida, etc.).
• Solid understanding of Android/iOS application lifecycle.
• Familiarity with low-level concepts on Android or iOS.
• Comfortable reading and modifying SMALI or iOS Runtime Headers.
• Security-minded with an attacker’s mindset and attention to edge cases.
• Problem solver, self-learner, and a team player with good interpersonal skills.

Nice to have

• Familiarity with assembly and ARM instruction set.
• Familiarity with obfuscation, packing, or code virtualization mechanisms.
• Experience with cross-platform frameworks (e.g., Xamarin, Flutter, React Native, etc.).
• Contributions to open-source security tools, bug bounty programs, or CTF competitions.
• Ability to write clean and secure code, following the best coding practices.