Detection Researcher (Coding Focused)
Z
ZimperiumMobile Security
Spain (Remote) / Argentina (Remote) / Netherlands (Remote) / Riga, Latvia / Romania (Remote) / United Kingdom (Remote)Full-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonJavaC++
Requirements
- Proven ability to collaborate effectively within a team environment, including forming and leading focused sub-groups to deliver specific project features or research objectives.
- Proficiency in reverse engineering using tools such as IDA Pro, Ghidra, or equivalent.
- Experience writing scripts and leveraging SDKs for reverse engineering tools.
- Solid programming experience in C, C++, Python and Java.
- Ability to produce efficient, maintainable, and secure code.
- Good knowledge of the ELF and MachO file formats.
- General good understanding on how to consult the official documentation.
- Familiarity with the LLVM framework (plus).
- Knowledge of code obfuscation and de-obfuscation techniques (plus).
Responsibilities
- Research and analyze advanced detection bypass techniques (e.g., rooting, hooking, and runtime application/system tampering) to assess threats to our detection systems.
- Evaluate and reverse-engineer tools and frameworks used to attack or evade our products, documenting findings and attack vectors.
- Lead and participate in structured brainstorming sessions to generate novel detection ideas and countermeasures.
- Help design, prototype, and implement new detection techniques and algorithms for different operating systems.
- Help develop, maintain, and improve internal tooling and automation to accelerate analysis, triage, and detection development.
- Perform and contribute to internal penetration testing and adversary emulation of newly introduced security features to validate effectiveness.
- Conduct thorough code reviews and technical reviews of detection-related contributions to ensure quality, maintainability, and correctness.
View Full Description & ApplyYou'll be redirected to the employer's site
