Lead Mobile Threat Researcher/Engineer

Job description

Huawei Consumer Business Group is the leader in the all-scenario AI life. It covers smartphones, PC and tablets, wearables, mobile broadband devices, family devices, and device cloud services. Huawei Consumer Business Group is dedicated to delivering the latest technologies to consumers and sharing the happiness of technological advances with more people around the world. We believe in creating safe, privacy-friendly, and high-quality products with great user experiences for our consumers. In Cloud Content Security Lab, we are seeking a highly motivated expert at senior or lead level that specializes in application security analysis for HarmonyOS AppGallery with extensive experience in Android or iOS application analysis. In this role, you will conduct security assessments, vulnerability analysis, and malicious behavior research for HarmonyOS applications. Using your deep expertise in Android or iOS application analysis, which spans over five years, you will build a robust security framework for HarmonyOS applications, ensure applications operate securely and stable in HarmonyOS ecosystem. You, in collaboration with our research partner, will be at the forefront of pushing the boundaries of AI-driven malware detection and analysis, developing cutting-edge techniques to enhance the security of our HarmonyOS applications. You will collaborate with a talented team of researchers, security engineers, and product manager to achieve the goal. Responsibilities Responsible for the security testing and evaluation of HarmonyOS applications, utilizing advanced industry or state-of-the-art technologies and methods to identify security vulnerabilities, risk points, and potential threats within the applications. Based on a deep understanding of malicious behavior patterns in the mobile application security industry and in collaboration with external research partners, conduct in-depth research on the malicious attack methods, behavioral characteristics, and evolutionary trends faced by Android or iOS applications, and establish corresponding malicious behavior analysis models and detection solutions. Conduct in-depth analysis of detected security issues, write detailed security analysis reports, propose and develop practical recovery and security reinforcement solutions, and track the rectification progress. Keep track of the latest technological developments, vulnerability information, and security incidents in the mobile application system and security field, and provide timely warnings and response strategies for the company. Collaborate with team members to conduct HarmonyOS application security attack and defense drills, enhancing the team's security protection capabilities and emergency response capabilities. Requirements Bachelor's degree or higher in Computer Science, Information Security, or related fields, with more than 5+ years of experience in Android or iOS application security analysis, reverse engineering, threat hunting and analysis, and related work. Proficient in the security mechanisms, architectures, and common vulnerability principles of Android and iOS applications, familiar with application reverse engineering, and other technologies. Deep understanding of malicious behavior patterns in the application security industry, such as malicious code infection, data theft, remote control, etc., with strong malicious sample analysis capabilities. Proficient in at least one mainstream security analysis tool or platform, such as JEB, JADX, IDA Pro, Ghidra, Frida, Burp Suite, etc., with some software development capabilities (e.g., Python, Java). Experience in applying machine learning and deep learning to cybersecurity challenges, specifically in malware detection and analysis. Proficient in Python and experience with deep learning frameworks (e.g., TensorFlow, PyTorch). Good communication skills, team collaboration spirit, and problem-solving abilities, self-driven, responsible, with “ can-do” attitude and good work ethics, strong learning ability, and innovative thinking. Nice-to-have Familiarity with the basic principles, application development frameworks, and security mechanisms of the HarmonyOS operating system is a bonus. Location: On-site in Helsinki, Finland. Why join us? Opportunity to develop your skills and competencies through interesting projects. Be a part of a dynamic, collaborative team environment where you'll learn from your colleagues. Excellent working tools and equipment that enable you to perform at your best. An international atmosphere with global impact and a culture that values creativity, problem-solving and cross-disciplinary collaboration. This position is a full-time consultant position and the contract will be signed with our supplier. About Huawei Huawei is a leading global provider of information and communications technology (ICT) infrastructure and smart devices. With integrated solutions across four key domains – telecom networks, IT, smart devices, and cloud services – we are committed to bringing digital to every person, home and organization for a fully connected, intelligent world. At Huawei, innovation focuses on customer needs. We invest heavily in basic research, concentrating on technological breakthroughs that drive the world forward. We have 207,000 employees, and we operate in more than 170 countries and regions. Founded in 1987, Huawei is a private company fully owned by its employees. Huawei continues to invest in basic research and open innovation, and accommodates and addresses customer needs with an open mind, while steering these needs with science and technology. We have also built flexible business models and encourage numerous industries to adopt a vast range of models and applications. Through such initiatives, we are bringing digital to every person, home and organization for a fully connected, intelligent world. We seek and reward talent! At Huawei, if you are dedicated to creativity, engagement of technical risks and delivery of target-driven results, your efforts will be rewarded with outstanding career prospects. About Huawei Finland R&D With 28 sites across Europe and over 2000 researchers, Huawei’s European Research Institute (ERI) oversees fundamental and applied technology research, academic research cooperation projects, and strategic technical planning across our network of European R&D facilities. Huawei Finland Research Center was established in 2012. At our sites in Helsinki and Tampere, you will have an outstanding opportunity to be part of the leading research and development of future smart devices. We offer a career in a forward-looking industrial research team with a solid track record in innovation and publication and delivering its result as factual contributions to on-the-market devices.