Staff Reverse Engineer (Mobile Applications)

Role Overview

We are seeking a highly skilled Reverse Engineer with a focus on mobile applications to uncover, analyze, and extract data from APIs used by popular eCommerce companies. This role sits at the intersection of security research, data engineering, and system-level programming. You will work closely with data teams to enable robust, scalable data pipelines by reverse-engineering client behavior and building tools to interface and extract data from undocumented APIs.

What You Will Do

• Reverse engineer mobile applications to extract API behavior and authentication logic.
• Perform both static and dynamic analysis on mobile apps.
• Develop and maintain tools and scripts for hooking, decryption, traffic interception, and data extraction.
• Build and manage proxy environments between mobile devices and workstations for traffic inspection.
• Create custom Proxy Toolkits to manipulate and analyze HTTP/S traffic in real time.
• Implement and maintain native code hooking using tools like Frida, Xposed, or Substrate.
• Conduct ARM/x86 Assembly analysis for deeper insights into app behavior.
• Reverse engineer web frontend logic (e.g., JavaScript obfuscation, token generation) to extract or simulate client-side API interactions.
• Ensure bypass of security features such as anti-debugging, anti-emulation, and anti-hooking.

What You’ll Build

• A high-fidelity, reliable API data extraction layer from mobile/web clients.
• Automation pipelines for decryption, API emulation, and response parsing.
• Systems to support high-throughput scraping with anti-bot and anti-fraud defenses in mind.

Basic Qualifications

• Proficient in Python or Java. JavaScript is helpful
• Strong experience with reverse engineering tools like IDA Pro, Ghidra, Jadx, Binary Ninja, Radare2, and JEB.
• Skilled in using debuggers (e.g., x64dbg, GDB, LLDB, WinDbg) for live process inspection.
• For mobile: Deep understanding of mobile operating system internals, including Android (AOS) and iOS, and related file formats (APK, IPA, ELF, Mach-O, PE).
• Experience with network traffic analysis, including proxy mechanics and networking protocols.
• Familiar with memory management concepts (heap/stack, paging, virtual memory) and OS architecture (Linux/macOS/Windows).

Preferred Qualifications

• Experience with web crawling and scraping.
• Knowledge of kernel-level development (e.g., socket drivers).
• Prior involvement with Android rooting or iOS jailbreaking (for mobile)
• Background in working with defenders/attackers in security research settings.
• Understanding of compiler internals and code auditing practices.

• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Accounts (HSA)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of Paid Time Off (PTO) a year based on tenure
• 12 Public Holidays
• Paid Parental leave
• Pre-tax commuter benefits