Principal Reverse Engineer (Mobile Security)

Company Description Hexon is focused on building the technical systems that modern conflict will run on, with an emphasis on secure, resilient, and highly reliable software and infrastructure. The organization works at the intersection of cybersecurity, defense, and advanced technology, designing tools that help partners operate safely in complex and evolving threat environments. Team members collaborate across disciplines to solve challenging security and engineering problems that have real-world impact. Hexon values innovation, ethical responsibility, and a mission-driven culture where technical excellence directly supports critical operations.

Role Description As a Principal Reverse Engineer (Mobile Security) at Hexon, you will lead advanced analysis of mobile applications and operating systems to identify vulnerabilities, understand adversary techniques, and improve defensive capabilities. You will perform static and dynamic reverse engineering of Android and iOS binaries, dissect obfuscation and anti-analysis mechanisms, and produce detailed technical reports and tooling to support security operations. Day-to-day, you will collaborate with security engineers and software developers to design proof-of-concept exploits, recommend mitigations, and integrate your findings into Hexon’s products and internal frameworks. You will mentor other team members, help define technical strategy for mobile security, and contribute to internal knowledge bases and automation pipelines. This is a full-time, remote role, offering flexibility while requiring strong communication and self-management in a distributed team environment.

Qualifications

• Strong expertise in reverse engineering mobile applications and OS components, including familiarity with tools such as IDA Pro, Ghidra, Frida, and similar frameworks.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Proficiency in low-level programming and analysis languages (e.g., C/C++, Java/Kotlin, Objective-C/Swift, ARM/x86 assembly) and mobile platform internals (Android and iOS).
• Solid understanding of mobile security concepts, including exploitation techniques, sandboxing, secure storage, encryption, and common attack vectors.
• Experience with static and dynamic analysis, debugging, and instrumentation of mobile software, including handling obfuscated or packed binaries.
• Background in vulnerability research, including discovering, documenting, and responsibly handling security flaws in complex systems.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Ability to produce clear, detailed technical documentation and communicate findings effectively to both technical and non-technical stakeholders.
• Experience leading projects, mentoring peers, and setting technical direction in security or reverse engineering teams.
• Bachelor’s or advanced degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent practical experience.
• Familiarity with secure software development practices, code review for security, and collaboration with development teams to implement mitigations.
• Comfort working in a remote, distributed environment with strong self-direction, reliability, and ethical judgment in handling sensitive topics.