🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Role Overview We are looking for an Android Security Research Engineer who is passionate about understanding Android internals, breaking application and platform defenses, and conducting deep vulnerability research at both the application and system level. The ideal candidate has strong hands-on experience in reverse engineering, mobile application pentesting, exploit analysis, and security research, with exposure to kernel- and framework-level attack surfaces. Key Responsibilities Perform reverse engineering of Android applications (APK/AAB) to identify security flaws, logic issues, and weak security implementationsConduct Android application penetration testing, including runtime manipulation, hooking, and traffic interceptionAnalyze and bypass common mobile security controls such as SSL pinning, root detection, anti-debugging, tamper protection, and obfuscationResearch Android internals including the Android framework, ART/Dalvik runtime, system services, Binder IPC, and permission modelPerform dynamic and static analysis of Android malware and suspicious applications (good to have)Develop, customize, and maintain Frida scripts, Objection workflows, and custom tooling for security researchReplicate and analyze publicly known Android vulnerabilities and exploits to understand root causes and impactAssist in vulnerability research and exploitation, including logic flaws, exploit chaining, and basic memory corruption concepts Must-Have Skills Strong understanding of Android fundamentals and Android internals (framework and system architecture)Hands-on experience with Android kernel concepts and attack surface awarenessProven experience in reverse engineering Android applicationsStrong hands-on knowledge of Android application penetration testing methodologiesExperience replicating and analyzing known Android exploits and adapting PoCsFamiliarity with exploit chaining concepts in mobile attack scenariosHands-on experience working with Corellium Android environments for security research and testingPractical experience bypassing:SSL pinningRoot detectionAnti-debugging and runtime protectionsSSL pinningRoot detectionAnti-debugging and runtime protectionsExperience with runtime instrumentation and traffic interceptionFamiliarity with tools including (but not limited to):ADBAndroid StudioFridaObjectionPidcatBurp SuiteMetasploitADBAndroid StudioFridaObjectionPidcatBurp SuiteMetasploitBasic understanding of exploitation techniques and vulnerability research conceptsStrong understanding of Android fundamentals and Android internals (framework and system architecture)Hands-on experience with Android kernel concepts and attack surface awarenessProven experience in reverse engineering Android applicationsStrong hands-on knowledge of Android application penetration testing methodologiesExperience replicating and analyzing known Android exploits and adapting PoCsFamiliarity with exploit chaining concepts in mobile attack scenariosHands-on experience working with Corellium Android environments for security research and testingPractical experience bypassing:SSL pinningRoot detectionAnti-debugging and runtime protectionsExperience with runtime instrumentation and traffic interceptionFamiliarity with tools including (but not limited to):ADBAndroid StudioFridaObjectionPidcatBurp SuiteMetasploitBasic understanding of exploitation techniques and vulnerability research concepts Good-to-Have Skills Experience with Android malware analysisHands-on experience with:Bootloader unlockingRooting Android devicesCustom ROMs or recovery environmentsBootloader unlockingRooting Android devicesCustom ROMs or recovery environmentsFamiliarity with native components (NDK), JNI, and ARM64Experience with Android malware analysisHands-on experience with:Bootloader unlockingRooting Android devicesCustom ROMs or recovery environmentsFamiliarity with native components (NDK), JNI, and ARM64 Scripting skills (Python, JavaScript for Frida, Bash) Required Skills Cyber-security android .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.