About this job

Our mission is to make the world safer and more secure. And our core strength is the expertise of our people. We are committed to developing the future generation of cyber scientists, analysts and professionals. And we are always keen to hear from talented and experienced people who wish to join us in our vision to be the leading cyber security advisor.

At NCC Group we take pride in being a global provider in high quality cyber security consultancy, risk mitigation advice and security services. NCC Group is well recognised for its established ‘offensive’ capability; over the last 5 years, we have continued to expand into cyber defence and incident response services.

Our Technical Security Consulting division is looking for a consultant with strong Android reverse engineering skills to join a mobile malware analysis team.

As global experts in the provision of deep technical cyber security advice, there is no better place to further your career and development than with NCC Group.

As you will mostly be working with clients in London it is preferable that you will be based in this area. However, we also have offices in Manchester, Milton Keynes, Cheltenham, Leeds and Edinburgh. Therefore, we can accommodate you wherever you are based.

Responsibilities

This is a unique opportunity to work with a mobile malware analysis team who support some of the largest mobile providers in the industry to reverse engineer exploits and malware samples, identify how they work, extract usable indicators and assist in the protection of billions of mobile devices worldwide.

The role will require you to use existing tools and data sets to identify new strains or variants of malware, analyse them with advanced dynamic analysis tools, perform decompilation and static analysis using tools such as IDA Pro, and design rules to tag samples for removal.

Profile

Who are we looking for?

Someone with a passion for the Cyber Security industry and motivation for self-learning. An individual who can work independently or as part of a multi-disciplined team, collaborating with colleagues and client alike, to provide a high quality service.

You will initially be focused on Android analysis with the option to rotate out into other types of technology and assessments during your first year, as requirements and skills dictate.

Desired skills:

• Advanced knowledge of Android reverse engineering including native libraries.
• Good understanding of common mobile malware techniques such as anti-debug, obfuscation, encryption, packing, reflection and dynamic code loading.
• Coding skills to be able to create ad hoc scripts, database queries, yara rules and tools.
• Deep understanding of Android internals such as the SDK, APIs, file system structure, security and privacy features.
• Good understanding of networking and the ability to interpret network traffic captures.
• Good written skills, documenting technical analysis in a format suitable for internal or external audiences.

What will you get in return?

• Long term career paths
• Continuous technical and non-technical training
• Guaranteed research time
• Monthly tech team presentations and socials along
• Annual two day internal security conference NCCCon (The last one was in Portugal in January 2020)
• Opportunities to go to BlackHat and DefCon in Las Vegas
• Opportunities for international travel if desired
• Generous car allowance / selection of vehicles
• Bonuses for significant contributions to research and delivery
• Variation of work across all sectors, technologies and engagement types with opportunities including potential secondments (if of interest) through to management of multi-month technical engagements and teams of consultants
• Ability to innovate and be recognised and rewarded for such
• Mentoring opportunities by senior leadership

If you’d like to be part of this fantastic team and the NCC Group journey, please apply or get in touch with Ryan Cookson or Holly Duncalf in the Talent Team.