Mobile Reverse Engineer & Vulnerability Researcher

Bitwise • Columbia, MD

5h

About The Position

As a Mobile Reverse Engineer & Vulnerability Researcher, you will analyze, reverse engineer, and assess mobile applications, SDKs, and operating systems in support of mission-driven cyber efforts. You will work at the intersection of offensive security, low-level software analysis, and application development, helping identify weaknesses, understand platform internals, and build capabilities that operate in complex mobile environments. This role requires deep technical curiosity, strong debugging skills, and the ability to operate independently in dynamic mission spaces. You may focus on Android, iOS, or both, and your work may span application-layer analysis through operating system and native library research. You will collaborate closely with operators, analysts, and other engineers to translate mission needs into technical solutions and actionable research outcomes.

Requirements

• Active TS/SCI with Polygraph.
• Experience with mobile application development or low-level mobile analysis
• Strong programming skills in one or more of the following: Java, Kotlin, Swift, Objective-C, Python, C/C++
• Experience using reverse engineering and analysis tools (e.g., Ghidra, IDA Pro, Frida, Jadx, Hopper, or similar)
• Understanding of mobile operating system architecture (Android and/or iOS)
• Familiarity with debugging tools and runtime instrumentation techniques
• Knowledge of networking fundamentals and mobile application communication patterns
• Ability to operate independently and solve complex technical problems

Nice To Haves

• Familiarity with cloud-backed mobile services and API security
• Experience supporting production CNO capabilities and operations
• Knowledge of end-to-end SIGINT collection and analysis systems
• Excellent written and verbal communication skills.

Responsibilities

• Maintain an active TS/SCI with Polygraph. Candidates without a current clearance will not be considered.
• Reverse engineer mobile applications, SDKs, and supporting libraries
• Perform static and dynamic analysis of Android and/or iOS applications
• Conduct vulnerability research across mobile platforms
• Develop proof-of-concept exploits and supporting tooling
• Debug and analyze application behavior using instrumentation frameworks
• Identify security weaknesses in mobile applications, APIs, and network interactions
• Develop scripts and tools to automate analysis workflows
• Document findings clearly for both technical and non-technical stakeholders
• Support integration of developed capabilities into operational environments

Benefits

• Top salaries because we're top performers
• Pick your PTO – Everyone values time and money differently, so we give you the flexibility to choose between 3 and 5 weeks of PTO with a corresponding adjustment to your pay. Your choice, your balance.
• All 11 federal holidays, paid!
• Up to 2 snow days, paid!
• We’ll quadruple (4x!) the first 6% you contribute to your 401(k), giving you up to a 24% company match. Contributing less than 6%? Unclaimed matches come right back to you as extra income, giving you a guaranteed 24% that goes to your retirement, to your paycheck, or both. C’mon now! 🚀
• 100% employer-paid medical, dental, vision, life, and disability insurances. That’s a lot. Already covered on health insurance? No problem – we’ll trade you this benefit for a boost to your salary instead.
• $5,250 annual education assistance for training, certifications, tuition, and even student loan repayments.
• Spot bonuses for obtained certifications, customer recognition, and just about anything else that makes us go "Hot damn!". We hope to say that many times about you. 🔥

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed