Security Managed Services Practitioner

Project Role :

Security Managed Services Practitioner

Project Role Description :

Apply security skills to design, build and protect enterprise systems, applications, data, assets, and people. Provide services to safeguard information, infrastructures, applications, and business processes against cyber threats.

Must have skills :

Product Security

Good to have skills :

Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST)

Minimum 2 Year(s) Of Experience Is Required

Educational Qualification :

15 years full time education

Summary

As a Security Sr Analyst specializing in Android Malware Reverse Engineering, you will be responsible for in-depth analysis of Android applications to identify data exfiltration, malware, and security breaches. Your daily activities will involve both Static Application Security Testing SAST and Dynamic Application Security Testing DAST using industry standard and open-source tools, with detailed documentation of your findings.

Roles & Responsibilities

Performing Reverse engineering using static SAST and dynamic DAST Methodologies on a high volume of Androidapplications and SDKs to proactively identify malware, spyware, trojans, and other security threats.Deconstruct and analyze malicious code at scale by reverse engineering DEX files and native libraries to uncoversophisticated attack techniques, tampering methods, and data exfiltration mechanisms.Independently investigate, triage, and resolve security escalations from both internal and external sources,ensuring timely and effective threat response.Reverse-engineer to uncover sophisticated Android threats such as spyware, banking trojans, rootkits, and RATsto fully understand their functionality, command-and-control C2 protocols, and data exfiltration methods.Identify and analyze emerging threats, new malware trends, and potential attack vectors targeting the Androidecosystem.Create clear, accurate, and detailed reports documenting analysis findings, malicious behaviors, andrecommended remediation steps for technical and non-technical stakeholders.Provide proactive input and creative ideas to enhance team workflows, tooling, new detections, collaborate withthe SMEs in creating and enhancing the detection mechanism and overall operational efficiency.

Professional & Technical Skills

A strong background in Application Security a prior role focused specifically on Android malware analysis.A solid understanding of the Android threat landscape and Potentially Harmful Application PHA classifications ishighly desirable.Deep understanding of the Android OS, application lifecycle, and Dalvik bytecode smali. Must have strongproficiency in reading source code in Java and Kotlin.Exposure to JavaScript, Flutter & Query languages such as SQLExperience with scripting languages Python, Bash.Proficiency in reading and analyzing ARM or x86 assembly language to dissect native libraries ELF files andidentify malicious functionality.Proven ability to manually de-obfuscate code, analyze complex algorithms, and reverse-engineer proprietarynetwork protocols to determine the full intent and capability of a threat.Demonstrated ability to independently solve complex technical challenges and analyze novel or undocumentedmalware techniques.Hands-on mastery of industry-standard tools like IDA Pro and Ghidra, including the ability to write scripts IDAPython, Ghidra Script to enhance analysis.Advanced experience with dynamic analysis tools, particularly Frida, for runtime manipulation, hooking, andtracing application behavior.Proficiency with static analysis tools like Jadx JEB and network traffic analysis tools like Burp Suite or Wireshark.

Additional Information

The ideal candidate will have a minimum of 4+ years of experience in Android Malware reversing experience.B.Tech, M.Tech, MCA, or B.Sc. in Computer Science or a related field. A 15-year full time education is requiredLocation is Hyderabad or Bangalore