Basic Info

Job Description

1. Android
   • Reverse engineer Android applications (APK / AAB / native libraries)
   • Analyze application logic, network protocols, and anti-tampering mechanisms
   • Bypass:
     • Root detection
     • Emulator detection
     • Anti-debugging
     • Anti-hooking
     • Certificate pinning
     • Obfuscation (ProGuard / R8 / DexGuard)
   • Perform mobile application penetration testing
   • Develop proof-of-concept exploits and automation tools
   • Hook and modify app behavior using Frida / Xposed / Magisk modules
   • Analyze encrypted traffic and proprietary APIs
   • Build automation bots using Accessibility Services
   • Conduct Android malware and behavior analysis

   • Document vulnerabilities and security findings clearly

      

2. Automation & Bot Development
   • Android Accessibility Services
   • UiAutomator / Instrumentation
   • Automation frameworks
   • Task scripting and bot logic
   • System & ROM Knowledge
   • Rooting devices
   • Flashing ROMs
   • Custom kernels
   • Magisk / LSPosed
   • Bootloader, recovery, fastboot
   • AOSP build environment
      

Job Requirements

• Programming Skills
  • Kotlin / Java (for analysis & PoC)
  • Python (automation & tooling)
  • JavaScript (Frida scripting)
  • Bash / Linux
• Hands-on with Frida, Objection, Xposed / LSPosed, Magisk modules
• Able to Hook Java & native methods, Modify app runtime behavior, Dump memory, strings, crypto keys, and Network & Protocol Analysis
• Strong understanding in HTTPS, TLS, certificate pinning, REST / WebSocket / gRPC, and Custom binary protocols
• Tools:
  • Burp Suite
  • Charles
  • mitmproxy
  • Ability to bypass traffic encryption and pinning
• Strong analytical and investigative mindset
• High curiosity and deep technical persistence
• Able to work independently on R&D tasks
• Excellent documentation and reporting skills
• Comfortable working with sensitive security research

Additional Information

Nice to Have (Bonus Skills)

• Experience in:
  • Mobile malware research
  • Fraud detection bypass
  • Anti-bot & anti-automation bypass
  • CTF / bug bounty background
  • CVE research experience
  • Android kernel / native exploit research
  • ARM assembly basics
• Experience with commercial mobile security frameworks (Appdome, Arxan, DexGuard)