Android CNO Software Developer

Booz Allen Hamilton•Annapolis Junction, MD

1d•Onsite

About The Position

Own the development and maintenance of Android CNO solutions enabling strategic cyber operations. Support our research team by receiving emerging research and proof-of-concept artifacts and productize them into reliable and deployable capabilities. Contribute to shared server-side infrastructure for command-and-control integration, payload staging, and exploit delivery as part of a cross-platform development team. Conduct independent research as needed to extend or adapt existing capabilities. Due to the nature of work performed within this facility, U.S. citizenship is required. Join us. The world can't wait.

Requirements

3+ years of experience in Android-focused offensive software development, such as implant engineering, exploit integration, or C2 tool development
Experience with Java on Android, including runtime DEX loading, class loader internals, and JNI interop
Experience with C on Android NDK, including ARM64 shared library development
Experience with offensive security concepts including implant persistence, beaconing protocols, payload staging, and self-update mechanisms
Experience with reverse engineering tools, such as IDA Pro, Ghidra, Frida, and Jadx, sufficient to interpret researcher-provided artifacts and integrate them into production software
Experience with build systems, such as ndk-build, Make, CMake, or Gradle, and GitHub Enterprise CI/CD
Experience with Docker, Python, scripting, and build automation
HS diploma or GED
U.S. citizenship is required.

Nice To Haves

Experience with Kotlin for Android development
Experience with JavaScript for integrating or adapting browser-based exploit chains
Experience integrating with C2 frameworks via SDK client libraries, SSE-based tasking, or JWT-authenticated APIs
Experience with OPSEC-conscious development practices including artifact sanitization and indicator reduction
Experience providing operational support to IC or DoD cyber mission forces
Knowledge of Android OS internals, including the Zygote process model, ART runtime, ClassLoader hierarchy, Binder IPC, and SELinux policy enforcement

Responsibilities

Develop and maintain Android CNO solutions.
Productize emerging research and proof-of-concept artifacts into reliable and deployable capabilities.
Contribute to shared server-side infrastructure for command-and-control integration, payload staging, and exploit delivery.
Conduct independent research to extend or adapt existing capabilities.