Mobile Reverse Engineer

Peraton•Linthicum, MD

8d•$135,000 - $216,000•Onsite

About The Position

This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area. The role involves Mobile Software Reverse Engineering to support development and malware analysis efforts. Responsibilities include conducting software exploitation against applications, middleware, operating systems (OS) user interface, OS drivers/runtimes, firmware, and other binary data. Candidates will leverage working experience in software engineering and related technologies, with experience in sizing and scoping, design, implementation, and delivery of mobile application solutions using iOS and/or Android development environments. A key aspect of the role is providing malicious code reverse engineering to isolate, review, analyze, and reverse-engineer potentially malicious programs recovered from compromised computer systems and networks. The position also requires researching new trends, techniques, and packaging of malicious software to stay current and ready to identify and handle zero-day exploits. Additionally, candidates will research the behavior of binaries and share detailed understanding of how apps behave at memory/register level to support technical exploitation operations. Support will be provided for designing, prototyping, documenting, testing, conducting exploitation automation, and transitioning code analysis methods and tools specific to technical exploitation operations.

Requirements

Mobile Software Reverse Engineering (with support to development and malware analysis efforts).
Working experience in software engineering and related technologies.
Experience in sizing and scoping, in design, implementation and delivery of mobile application solutions using iOS and/or Android development environments.
Experience with Windows, Linux, Android, OS X, and iOS operating system & architecture.
Experience in computer or cell phone architecture, system internals, operating systems, and/or boot process software engineering.
Experience with static analysis tools such as IDA Pro, Ghidra and Binary Ninja.
Experience with debugging tools such as WinDbg.
Experience with virtualization, sandboxing, and emulation tools like VMware, KVM, QEMU and others.
Working knowledge of programming languages such as C, C++, .NET, Python, Java, etc.
Active TS/SCI with Poly eligibility.

Nice To Haves

Proven ability to build, maintain, and leverage collaborative relationships with stakeholders across different government agencies, serving as an effective technical liaison.
Experience establishing and managing formal partnerships between government entities (e.g., via Memoranda of Understanding or Inter-Agency Agreements) to achieve shared mission objectives.
Exceptional communication skills, with a demonstrated ability to present complex technical information clearly and persuasively to diverse audiences, including non-technical decision-makers.
Skilled in facilitating inter-agency working groups and building consensus among partners who may have differing priorities or organizational cultures.
Strategic and proactive mindset with the ability to identify and develop new opportunities for cross-agency collaboration that advance the organization's mission.
A strong sense of mission ownership and personal accountability, focused on elevating the team's role from a participant to a key contributor within the working group.
Experience requiring a deep knowledge of Android and a strong passion in mobile industry and mobile development.
Experience developing/designing mobile phone platforms highly desired.
Experience in wireless API's (Wi-Fi, Bluetooth) preferred.
Engineer software scripts in C, C++, and Java with emphasis on prototyping and API extraction.
DoD 8570 Compliant, active IAT Level II certification.
Additional active certifications: CFR, RCCE Level 1, CySA+, GCFA, GCFE.

Responsibilities

Conduct software exploitation against applications, middleware, operating systems (OS) user interface, OS drivers/runtimes, firmware and other binary data.
Provide malicious code reverse engineering to isolate, review, analyze, and reverse-engineer potentially malicious programs recovered from compromised computer systems and networks.
Research new trends, techniques, and packaging of malicious software to stay current and ready to identify and handle zero-day exploits.
Research behavior of binaries and share detailed understanding of how apps behave at memory/register level in support of technical exploitation operations.
Support efforts to design, prototype, document, test, conduct exploitation automation and transition code analysis methods and tools specific to technical exploitation operations.
Debug mobile applications' memory and performance issues.