Android CNO Software Developer

What you'll do

• Develop and maintain Android CNO solutions for strategic cyber operations.
• Productize research artifacts and proof-of-concepts into reliable, deployable capabilities.
• Build shared server-side infrastructure for command-and-control integration, payload staging, and exploit delivery.
• Conduct independent research to extend or adapt existing offensive capabilities.
• Integrate researcher-provided artifacts into production software using reverse engineering tools like IDA Pro and Ghidra.
• Develop Android implants featuring persistence, beaconing protocols, and self-update mechanisms.
• Implement ARM64 shared libraries and manage Java runtime features like DEX loading and JNI interop.
• Automate build processes using Docker, Python, and CI/CD pipelines.

What we're looking for

• U.S. citizenship is required.
• High school diploma or GED.
• 3+ years of experience in Android-focused offensive software development, such as implant engineering, exploit integration, or C2 tool development.
• Experience with Java on Android, including runtime DEX loading, class loader internals, and JNI interop.
• Experience with C on Android NDK, including ARM64 shared library development.
• Experience with offensive security concepts like implant persistence, beaconing protocols, payload staging, and self-update mechanisms.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, Frida, and Jadx.
• Experience with build systems (ndk-build, Make, CMake, or Gradle), Docker, Python, scripting, and GitHub Enterprise CI/CD.
• Experience with Kotlin for Android development (preferred).
• Experience with JavaScript for integrating or adapting browser-based exploit chains (preferred).
• Experience integrating with C2 frameworks via SDK client libraries, SSE-based tasking, or JWT-authenticated APIs (preferred).
• Experience with OPSEC-conscious development practices including artifact sanitization and indicator reduction (preferred).
• Experience providing operational support to IC or DoD cyber mission forces (preferred).
• Knowledge of Android OS internals, such as Zygote process model, ART runtime, Binder IPC, and SELinux policy enforcement (preferred).