Mobile Malware Engineer
$101,000–$152,000 year
On-siteLinthicum Heights, Maryland, United States
Job Summary
Analyze, reverse engineer, and characterize malicious software targeting Android and iOS platforms for a federal government customer. Perform static and dynamic analysis of mobile malware, unpack APK/IPA files, and bypass runtime protections to identify C2 infrastructure, persistence mechanisms, and data exfiltration vectors. Develop custom tooling, automation scripts, and YARA detection signatures while producing technical reports with MITRE ATT&CK for Mobile mappings. Collaborate with forensics, vulnerability research, and cyber operations teams to deliver actionable intelligence supporting national security missions. Requires Active Top Secret with SCI eligibility clearance and proficiency in ARM/ARM64 assembly.
Required Qualifications
- Bachelor's + 8 yrs experience, or Master's + 6 yrs experience
- A degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, Information Systems, or related field
- Active Top Secret with SCI eligibility clearance
- Proficiency in ARM/ARM64 assembly and low-level binary analysis
- Strong knowledge of Android and iOS internals (APK/IPA structure, ART runtime, Mach-O binaries)
- Hands-on experience with: Ghidra, IDA Pro, Jadx, Frida, MobSF, Corellium
- Scripting in Python
- Familiarity with Java, Kotlin, or Swift
Desired Qualifications
- Experience with CNO toolchains or offensive mobile capability development
- Familiarity with nation-state APT campaigns targeting mobile endpoints
- Knowledge of MDM/EMM environments and mobile forensics tools (Cellebrite, Oxygen Forensic)
- Published research, CVEs, or open-source contributions in mobile security
- GREM certification
- GMOB certification
- eMAPT certification
- OSCP certification
- CISSP certification
- CompTIA SecurityX certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.