Reverse Engineer / Android Developer

  • Full Time
  • Anywhere

Website joinbelvo Belvo

We are Belvo, a financial API platform for Latam.

A little bit about us:

We are Belvo, a financial API platform for Latam that enables any company or developer to access and interpret their end-users’ financial information. We are turning the rich and diverse Latam financial ecosystem into a set of developer-friendly tools and APIs.

We’re a highly-technical, passionate and driven team. We have offices in Barcelona, Mexico City and São Paulo and and the majority of the tech team works remotely.

We are tackling a very challenging problem: connecting fintech innovators with legacy financial infrastructure. We strive to go beyond the limits of what is possible today and to do so in an elegant and developer-first way.

You can read more about us and why we’re doing what we’re doing here and here.

About the team:

We work in cross-functional, autonomous teams. We follow continuous delivery best practices executed on top of a modern technology stack.
Our products are built for developers, by developers. Technological excellence is at the heart of what we do.
We are pragmatic and customer focused. We strive to find the right set of trade-offs in order to validate our hypothesis as early as possible, iterating on our products based on customer feedback.
We communicate transparently. We do weekly all hands where we get together to discuss company performance and goals.
We are a flexible international team focused on creating cool stuff. Some of us prefer to work together in one of our offices and others prefer remote. For us there’s no difference as long as you have an excellent internet connection and are able to overlap with the team between 3pm and 6pm, CEST timezone.
Also we are backed by some of the leading investors in Silicon Valley and Latin America, including Founders Fund, Kaszek Ventures and YCombinator.

Your challenge:

Belvo is using advanced techniques to access previously inaccessible financial data. We use a set of approaches, among which the analysis of consumer Android applications to infer implicit network APIs and endpoints.

The right candidate will need to be very familiar with how Android Apps work behind the scenes, the Android runtime, and techniques such as decompilation, deobfuscation and network traffic analysis. Cryptographic knowledge (PKI, Symmetric and Asymmetric encryption, certificates handling) will also be highly valuable.

Studying Apps you don’t have the source code for using tools like apktool, androguard, dextra, etc.
Android Apps hooking and instrumentation (using tools such as Xposed or Frida).
Dropping to kernel-level when needed, to apply patches and add instrumentation. Ability to build own kernel if necessary.
Source code decompilation & deobfuscation.
Network traffic analysis between Android applications and third-party network endpoints.
Inferring behaviours and building proofs of concept to replicate application behaviour in other environments.
Thinking outside the box applying strong lateral thinking. Solving problems that have no direct or obvious solution.
Being perseverant and don’t giving up in the face of difficulty. We can’t always have a “plan b” (although we try to).
No computer/information security experience required – we are more interested in software engineering backgrounds.

You can be part of the gang if:

Track record of past successes in reverse engineering Android applications
Strong experience with Android internals and network protocols
Willingness to solve challenging problems

Amazing if:

iOS experience
Programming knowledge in Python or Javascript

Our tech stack:

We’re building our platform using modern technologies, putting the focus on reliability and long-term maintainability
We primarily use Python on the backend. We use battle-tested technologies such as Django, and we are heavy users of Python’s asyncio for some parts of our stack
We use Javascript, Vue.js and Sass on the frontend. We are developing and leveraging our own design system and component library
We run our infrastructure on top of Amazon Web Services, leveraging managed services. We tend to favor the use of managed services wherever possible, in order to focus on our business problems
We observe and monitor our services using Datadog
We follow Continuous Integration and Continuous Delivery best practices

Our perks:

🏄 1.8km from the beach
🚀 Stock options (we are all owners and this is very important to us)
🔆 Flexible working hours
🔝 Remote friendly
🐶 Pet friendly
🍎 Meals, transport, and kindergarten via flexible compensation scheme
🎊 Paid time off on your birthday
🍒 Fresh fruit every week, all-you-can-drink tea and coffee
🍻 Friday happy hours after our weekly team meetings
🙋 Training Budget
😎 Team building events
🙀 Bank holidays swap inside the same month
🔋 Fitness/ wellness stipends
🚀 Yearly offsite

Salary: €45,000 gross/annual to €60,000 gross/annual + Equity

Tagged as: Android, javascript, python, reverse engineering

To apply for this job please visit recruiterflow.com.