Job Description:
This is a Reverse Engineer position, not an Android Developer position. Android Developers, please do not apply for this role.
We are looking for an experienced Freelance Senior Android Reverse Engineer to join
our team for a specific project or contract. The ideal candidate will be an expert in analyzing
Android applications, focusing primarily on native .so libraries. This role will involve
reverse engineering, security assessments, and vulnerability analysis of Android apps,
specifically targeting native code vulnerabilities. You will work independently to deliver
results, with the flexibility of working remotely and managing your own schedule.
If you are passionate about mobile security, reverse engineering, and have extensive
experience with Android’s native components, we’d love to collaborate with you.
Responsibilities:
specifically focusing on analyzing native .so libraries and C/C++ code to identify
security vulnerabilities.
particularly those utilizing native code, to assess the security of .so libraries and
uncover potential exploits.
vulnerabilities in Android’s native layer (e.g., buffer overflows, memory corruption,
code injection) and document them.
streamline the analysis of Android apps, specifically for analyzing native code.
found, suggesting clear steps for remediation.
review and address security flaws, providing technical guidance on securing native
Android applications.
applications, including integration of virtual camera streams or alternate camera
sources, as needed.
the default camera application used by Android apps, and manage how the app
interacts with the camera (e.g., using a specific camera app instead of the default
system app).
Requirements:
mobile security, with a strong focus on native Android applications and .so file
analysis.
Ghidra, Radare2, Frida, and JADX for decompiling and disassembling native
Android code.
Knowledge of Android’s NDK (Native Development Kit) and ART/Dalvik runtime.
shared libraries (.so files), and how they interact with Android apps.
vulnerabilities and exploits specific to native code (e.g., buffer overflows, code
injection).
deadlines while working independently in a remote freelance setting.