Lead Mobile Security Researcher

Job Title: Lead Mobile Security Researcher

Location: Helsinki, Finland

Sponsorship and Relocation Assistance Available

Job Description

In this role, you will conduct security assessments, vulnerability analysis, and malicious behavior research for OS applications. Using your deep expertise in Android or iOS application analysis, which spans over five years, you will build a robust security framework for OS applications, ensure applications operate securely and stable in ecosystem.

Responsibilities

• Responsible for the security testing and evaluation of HarmonyOS applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications.
• Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions.
• Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress.

Requirements

• Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work.

Discover our full range of relocation jobs with comprehensive support packages to help you relocate and settle in your new location.

• Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies.
• Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc., with strong malicious sample analysis capabilities.
• Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java).

Nice-to-have

• Familiarity with the basic principles, application development frameworks, and security mechanisms of the OS operating system is a bonus.