Senior Reverse Engineer (Hybrid - Barcelona)

What makes Cognizant a truly unique place to work?

Cognizant offers strong growth, global reach and an innovative environment where tech professionals can deliver meaningful, high‑impact work. Teams collaborate across regions to build and deliver advanced solutions for leading companies, enabling greater agility, innovation and performance.

We are looking for a capable Senior Reverse Engineer to join our dynamic project. You will tackle the most complex reverse engineering tasks, specifically those involving applications protected by advanced, custom anti-tampering and obfuscation techniques.

The primary responsibility is the in-depth analysis and interpretation of Android application code using industry-standard reverse engineering tools and methodologies to understand app functionality, identify potential malicious use of the SDK, and support overall project objectives. This presents an exciting opportunity for professionals passionate about mobile security, reverse engineering, and overcoming difficult technical challenges.

Can you see yourself in this position? Check the requirements and apply!

Key Responsibilities:

Act as the final technical authority for the most complex, evasive, and highly protected Android applications, with no expected escalation of tasks.
Execute deep analysis into complex ARM Assembly, system-level calls, and low-level binary analysis.
Define and enforce the highest technical standards for the team's reverse engineering methodologies and documentation quality.
Able to defeat all forms of advanced obfuscation (custom packers, virtualization, advanced anti-debugging).
Develop custom tools, Ghidra/IDA Pro plugins, or complex automation frameworks to enable analysis of novel protection mechanisms.
Contribute to high-level security risk assessment and technical reporting based on expert-level findings.

You are someone who brings:

Expertise in Reverse engineering Android applications (APKs) OR Android Development using Android SDK OR Penetration Testing / Offensive security
Expertise in ARM assembly language and deep knowledge of the Android security model and kernel interaction.
Demonstrable experience defeating commercial and custom anti-analysis and anti-tampering techniques.
Experience with static and dynamic analysis techniques.
Strong analytical and problem-solving skills.
Excellent communication and documentation skills.
Familiarity with malware analysis techniques on mobile platforms.

Nice to have:

Familiarity with and practical experience using reverse engineering tools such as apktool, Ghidra (or IDA Pro), and hexdump.
Experience with assembly languages (e.g., ARM).
Familiarity with malware analysis techniques on mobile platforms.
Understanding of obfuscation and anti-tampering techniques used in Android apps.
eLearnSecurity Junior Penetration Tester (eJPT).
eLearnSecurity Mobile Application Penetration Tester (eMAPT).
eLearnSecurity Certified Mobile Application Professional (eCMAP).
Offensive Security Certified Professional (OSCP).
Other relevant certifications in penetration testing, mobile security, or reverse engineering.