Android Reverse Engineer Jobs in Ashburn, VA (NOW HIRING)

What Impact You'll Have:

Our team writes CNO software for mobile devices (both Android and iOS) as part of a larger program providing multi-platform support of ongoing operational missions. On some projects in the IC/DoD, you don't see how your work is being used. This project is very different - you get to see the software you write get put into action. You know who is using it, on which missions, and what impact your work is having. You have a ringside seat to the action. The work is very close to the devices and the hardware/software interface. You'll find mobile devices, embedded systems, linux kernels, OS internals, networking, etc. Languages used depend on the specific operational mission being supported and often include, C, C++, Python, and JavaScript. Overall, there is room for a LOT of creativity in how to solve problems. The team is exceptional - both the government staffers and the contractors are highly-skilled, and the team is unusually well-managed. It is fast-paced, with turnaround times being measured in weeks, but without the knee-jerk changes of focus that some projects have. The culture is about doing high-quality work that leads to successful missions: each Engineer's work is visible, so you won't work with any slackers. On-the-job learning is encouraged: as an example, a strong low-level Software Engineer joined the team without much mobile experience, and the team invested time and energy to spin them up on Android and iOS internals so they could become a strong contributor. The team regularly adds CNO Tool Developers, O.S. Internals Developers, Vulnerability Researchers, Reverse Engineers, Mobile Exploitation experts, and Test Engineers with experience developing custom test automation scripts for mobile devices. Work on this program takes place in the Dulles, VA area (we cannot support remote work) and requires a TS clearance, (you can join the project with a TS or higher clearance and over time will be upgraded to TS/SCI + Poly applicable to this customer).

What You'll Be Owning:

GRVTY is seeking an Android Developer with a TS/SCI + Poly clearance (you can join the project with a TS or higher clearance and over time will be upgraded to TS/SCI + Poly applicable to this customer) to join one of our top projects in Dulles, VA. We are in need of an Android Developer to join our team to solve real-time cyber challenges. Looking for individuals who enjoy working on a mission-focused team that works very closely with our end users. Duties include design custom software tools and techniques for the Android platform; be responsible for end-to-end design and development of custom software; diagnose and debug issues using both COTS and GOTS tools; have a firm understanding of how networks work; develop documentation pertinent to operating and supporting developed software and techniques; mentor and lead junior-level developers to accomplish mission objectives; and solve real-time cyber challenges.

What You Must Have:

• Active TS/SCI with Polygraph Clearance
• Development, testing and debugging Python and C
• Experience in UNIX applications using make files or comparable build environments, mission-applicable platforms.
• Programming CNO tools and techniques
• Network sockets programming and expert packet-level understanding of IP, TCP, and application-level protocols.
• Tracing code execution in a debugger (WinDbg/gdb/IDA Pro).
• Reverse engineering native binaries.
• Developing proof-of-concept exploit software
• Knowledge of Unix kernel internals, including the OS runtime linker/loader, object file formats (e.g., ELF), file system internals (e.g., NTFS, ext2, btrfs), OS-specific mandatory and discretionary access control mechanisms, and process and thread APIs and data structures
• Understanding of security protection mechanisms (ASLR, DEP, NX), how to defeat them, and how to detect a defeat
• Working with version control software such as git, Gitlab, etc.

What Would Be Nice to Have:

• Experience with native-level mobile development
• Experience with vulnerability analysis
• Experience with assembly, preferably ARM
• Understanding of mobile security protection mechanisms, such as SELinux and application sandboxing Objective-C, Swift or C++ programming
• Ability to work independently and as part of a team in a fast-paced environment with ever-changing requirements.
• Undergraduate degree in Computer Science preferred

#LI-BPJ