Mobile Reverse Engineer - EMEA

Description

Location: Europe (Remote)

What is Vetric?

Vetric is the intelligence behind the teams that stop crime online.

Investigators, analysts and platform defenders use Vetric to see what bad actors do in the open, from fraud and impersonation to organized crime, terror networks and foreign influence, so they can act before harm spreads.
Vetric doesn’t do that work itself but powers the people who do.

The social and video intel runs inside customers’ own products, as a dependency their roadmaps are built on, which is why reliability and depth count for as much as coverage.

Operating globally, Vetric serves industry leaders across more than 20 countries in cybersecurity, digital risk protection and public safety teams.



Why Vetric?

Vetric is profitable from day one (fully bootstrapped - we haven’t raised external funding), and we’re building foundational technology - not chasing trends. Because this is infrastructure that matters, we operate with engineering discipline, strong ownership, and long-term thinking.

We’re at a true inflection point: the team is now large enough to require real infrastructure, yet still small enough that what you build will define how things work for the next several years.

This is infrastructure that matters and so is how we operate internally. You’ll be working with a sharp, focused team that takes engineering discipline seriously and is intentionally building an organization that matches the quality of its product.

Position Overview

We’re looking for a Security Researcher to join our Mobile Reverse Engineering team, working remotely from anywhere in Europe. You’ll reverse engineer some of the world’s most widely used Android apps, uncover how they really work, and build the tools that turn your findings into the data pipelines our customers rely on.

Role & Responsibilities

As a Security Researcher, your role will include:

• Reverse engineering major Android applications to extract strategic product intelligence.
• Working with tools such as Frida, JEB, Ghidra, IDA, and custom-built instrumentation frameworks.
• Analyzing obfuscation techniques, ARM-native binaries, and root/jailbreak detection mechanisms.
• Assessing architectural and functional changes across app versions.
• Developing internal tools and scripts to automate and scale static/dynamic analysis workflows.
• Analyzing TLS and HTTP/2 fingerprints.
• Extracting and reconstructing data structures such as Protobuf and GraphQL.
• Researching and developing bot detection evasion techniques.
• Analyzing RASP (Runtime Application Self-Protection) mechanisms.
• Analyzing hardware attestation mechanisms.
• Using AI tools to speed up and support the research process.
• Collaborating with engineering and intelligence teams to turn technical findings into actionable insights.

Note: All research is conducted strictly within legal and ethical boundaries. We do not engage in hacking or unauthorized access.

Requirements

Qualifications

• 3+ years in Android reverse engineering, mobile security research, or related low-level development roles.
• Strong proficiency in Android internals and Java, with working knowledge of Smali and APK structure.
• Scraping experience.
• Deep understanding of Frida and runtime manipulation techniques on Android.
• A curiosity-driven mindset with a passion for exploring undocumented system behaviors and edge cases.

We’d be lucky if you had

• Familiarity with Typescript scripting for analysis automation.
• Experience with anti-analysis evasion, obfuscators, or commercial packers.
• Previous work with IDA Pro, Radare2, or other RE platforms.
• Web scraping, JavaScript deobfuscation, browser security analysis and fingerprinting

We hire people, not just skills. We encourage you to apply if you think this role is a great fit for you, even if you don’t meet 100% of the requirements.