Ramya S
Android Malware Analyst
Bangalore
Summary
Cyber Security Engineer (Android App Analysis) with 4+ years hands-on experience analyzing Google Play Store apps and off-market apps for malicious and risky behaviors. Experienced in identifying phishing, privilege escalation, toll fraud, spyware, ransomware, and riskware categories. Seeking an Android Malware Analyst role to apply deep APK analysis, Java/Android internals knowledge, and runtime instrumentation to detect, triage, and remediate mobile threats.
Overview
2
2
Certifications
5
5
years of professional experience
Work History
Sr. Cyber Security Engineer
Cognizant
04.2022 - Current
- Analyzed Play Store apps to detect malicious behaviors including phishing, privilege escalation, toll-fraud, spyware, and ransomware.
- Performed static and dynamic APK analysis using JADX, apktool, MobSF, and Ghidra. Instrumented apps at runtime with Frida and Objection to bypass SSL pinning/root checks.
- Intercepted API traffic with Burp Suite and HTTP Toolkit; identified exfiltration channels and validated fraud/command-and-control flows.
- Produced actionable reports detailing TTP mapping, severity assessment, and tailored remediation recommendations to enhance threat response.
- Collaborated with cross-functional teams (policy, legal, engineering) to escalate high-impact threats and support user protection.
- Analysing applications constructed with a range of frameworks such as Flutter, Unity, React Native, and Hermes,cocos, employing both static and dynamic analysis methods.
- Bypassed emulator-blocking applications using Frida, Medusa, and Ghidra, enabling comprehensive security analysis.
Education
Bachelor of Electronics and Communication Engineering -
Dr.Mahalingam College Of Engineering & Technology
01-2021
Skills
- Android & Java (SDK, Activities/Services/Providers)
- APK RE & internals: JADX, apktool, Ghidra (native code analysis)
- Runtime instrumentation: Frida, Objection, adb (SSL-pinning/root bypass)
- Network/API analysis: Burp Suite, HTTP Toolkit
- Threat triage: phishing, privilege escalation, toll-fraud, spyware/ransomware and other security violations
- Cross-platform familiarity: Exposure to Kotlin/Unity/Flutter/Cordova/React Native app behaviors (analysis perspective)
- Automation: basic frida hooks
- Collaboration: reporting, remediation, Trust & Safety/SOC coordination
Certification
Completed a Udemy Course on Cyber Security Common Attacks.
EXPERTISE
- Application Security: Advanced expertise in SAST and DAST for high-volume mobile applications.
- Reverse Engineering: Deep proficiency in analyzing DEX bytecode and ELF native libraries (.so files).
- Anti-Analysis Evasion: Proven track record of bypassing certificate pinning, anti-debugging mechanisms, and code obfuscation.
- Malware Analysis & Threat Intelligence: Experienced in identifying data exfiltration, banking trojans, RATs, spyware, and complex attack chains.
- Security Concepts : Decryption Hashing, Salting, Code Obfuscation & Packing
Timeline
Sr. Cyber Security Engineer
Cognizant
04.2022 - Current
Bachelor of Electronics and Communication Engineering -
Dr.Mahalingam College Of Engineering & Technology