5+ Reverse engineering Jobs in India

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android) and experience with IoT testing
• Technology Stack: AWS, GCP, Objective C, Java, Python, Java/Type script
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• Should have 1-3 years of full-time experience in application VAPT or show something that proves experience doesn’t matter
• Strong Analytical Skills and critical skills 
• Strong grasp of fundamentals of information security
• Self-taught learner willing to read and keep up-to-date on technological changes and how they could be used
• Can accurately define an issue and create detailed Proof-of-concept and write-up of the findings.
• Provide appropriate remediation and mitigations of the identified vulnerabilities.

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of security test cases
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 2 months

Training on processes, security workflow

Within 3 months

Pentesting web, mobile, API endpoints/ Submitting vulnerabilities to 

Within 1 year

Research and publish whitepapers, contribute to the Appknox Scanner

Personality traits we really admire:-

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 - Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 - HR Round

Compensation

• As per Industry Standards

 Personality Traits We Really Admire:

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Location: Remote; Geography restricted to India

Type: Full-time or Part-time Contract Work

Fluent Language Skills Required: English & Hindi. Native-level fluency in English and Hindi is required for this position.

Why This Role Exists

At Mercor, we believe the safest AI is the one that’s already been attacked — by us. We are assembling a red team for this project - human data experts who probe AI models with adversarial inputs, surface vulnerabilities, and generate the red team data that makes AI safer for our customers.

This project involves reviewing AI outputs that touch on sensitive topics such as bias, misinformation, or harmful behaviors. All work is text-based, and participation in higher-sensitivity projects is optional and supported by clear guidelines and wellness resources. Before being exposed to any content, the topics will be clearly communicated.

What You’ll Do

• Red team conversational AI models and agents: jailbreaks, prompt injections, misuse cases, bias exploitation, multi-turn manipulation
• Generate high-quality human data: annotate failures, classify vulnerabilities, and flag systemic risks
• Apply structure: follow taxonomies, benchmarks, and playbooks to keep testing consistent
• Document reproducibly: produce reports, datasets, and attack cases customers can act on

Who You Are

• You bring prior red teaming experience (AI adversarial work, cybersecurity, socio-technical probing)
• You’re curious and adversarial: you instinctively push systems to breaking points
• You’re structured: you use frameworks or benchmarks, not just random hacks
• You’re communicative: you explain risks clearly to technical and non-technical stakeholders
• You’re adaptable: thrive on moving across projects and customers

Nice-to-Have Specialties

• Adversarial ML: jailbreak datasets, prompt injection, RLHF/DPO attacks, model extraction
• Cybersecurity: penetration testing, exploit development, reverse engineering
• Socio-technical risk: harassment/disinfo probing, abuse analysis, conversational AI testing
• Creative probing: psychology, acting, writing for unconventional adversarial thinking

What Success Looks Like

• You uncover vulnerabilities automated tests miss
• You deliver reproducible artifacts that strengthen customer AI systems
• Evaluation coverage expands: more scenarios tested, fewer surprises in production
• Mercor customers trust the safety of their AI because you’ve already probed it like an adversary

Why Join Mercor

• Build experience in human data-driven AI red teaming at the frontier of safety
• Play a direct role in making AI systems more robust, safe, and trustworthy

The contract rate for this project will be aligned with the level of expertise required, the sensitivity of the material, and the scope of work. Competitive rates commensurate with experience.

Relevant experience on using tools like JSP, Servlet for web applications

· MVC frame works - Struts or Spring

· Web services- SOAP and REST WebLogic, Hibernate

· Middleware technologies MQ OSB.

· Web/App Servers: Tomcat or WebLogic or JBoss

· Experience using Angular, Micro Services using Spring, jersey, Swagger

· Good knowledge of Backend and Front-end technologies

· Good knowledge of Core Java, J2EE, Ajax, Spring, Java Script, jQuery, HTML

· Good knowledge of any RDBMS database like SQL Server, Oracle, MySQL & Cluster set-up, performance benchmarking, client-side API evaluation, knowledge of various deployment strategies

· Strong knowledge with Core JAVA concepts – Exception handling, Multi-threading, Collection, String, OOPS etc…

· Advanced understanding of Windows and Linux based operating systems

· Mainly 3-4 months hands on with reverse engineering and old legacy solutions to new modern applications

· Working knowledge using REST, HTTP, TCP, SCTP protocols

· Hands-on with JAVA frameworks such as – Thread Pool Executor, Object Pooling, Logging (Log4j preferred), XML/JSON handling

Education Criteria:

· Preferred BE degree in CS, E&C, E&E

· Proficient being a J2EE Developer (courses or project done) and data analytics skills

· Flexible to work on any projects assigned

Note: Terms & Conditions

· This opportunity will be work from office

· Reporting location - Bangalore office, Vijayanagar

What we need from you

• You will bring very strong consulting skills, are customer focused and know how to navigate through tough project situations
• You are highly motivated, creative in your approach to technical problems and love all things about Data!
• You spend a significant amount of time to keep your technical skills updated and are constantly looking for the next big data challenge
• You will be a key contributor to our growth and our customer’s success
• You will bring both broad and deep knowledge in Efficient Java (JSP, Servlet) Developer and going forward build the ability to architect a solution by mapping a customer business challenges
• You are resourceful and confident under pressure
• Willingness to travel as needed to customer sites

Competencies:

• Relevant experience on using tools like JSP, Servlet for web applications
• MVC frame works - Struts or Spring
• Web services- SOAP and REST WebLogic, Hibernate
• Middleware technologies MQ OSB.
• Web/App Servers: Tomcat or WebLogic or JBoss
• Experience using Angular, Micro Services using Spring, jersey, Swagger
• Good knowledge of Backend and Front-end technologies
• Good knowledge of Core Java, J2EE, Ajax, Spring, Java Script, jQuery, HTML
• Good knowledge of any RDBMS database like SQL Server, Oracle, MySQL & Cluster set-up, performance benchmarking, client-side API evaluation, knowledge of various deployment strategies
• Strong knowledge with Core JAVA concepts – Exception handling, Multi-threading, Collection, String, OOPS etc…
• Advanced understanding of Windows and Linux based operating systems
• Mainly 3-4 months hands on with reverse engineering and old legacy solutions to new modern applications
• Working knowledge using REST, HTTP, TCP, SCTP protocols
• Hands-on with JAVA frameworks such as – Thread Pool Executor, Object Pooling, Logging (Log4j preferred), XML/JSON handling

Education Criteria:

• Preferred BE degree in CS, E&C, E&E
• Proficient being a J2EE Developer (courses or project done) and data analytics skills
• Flexible to work on any projects assigned

Note: Terms & Conditions

• This opportunity will be work from office

A malware analyst examines malicious software, such as bots, worms, and trojans to understand the nature of their threat. This task usually involves reverse-engineering the compiled executable and examining how the program interacts with its environment. The analyst may be asked to document the specimen's attack capabilities, understand its propagation characteristics, and define signatures for detecting its presence. A malware analyst is sometimes called a reverse engineer.

Security product companies, in industries such as anti-virus or network intrusion prevention, may hire malware analysts to develop ways of blocking malicious code. Large organizations in non-security industries may also hire full-time malware analysts to help protect their environment from attacks, or to respond to incidents that involve malicious software. Malware analysis skills are also valued by companies that cannot justify hiring full-time people to perform this work, but who wish their security or IT administrators to be able to examine malicious software when the need arises.