Reverse Engineer / Android Developer in Belvo

A little bit about us:

We are Belvo, a financial API platform for Latam that enables any company or developer to access and interpret their end-users' financial information. We are turning the rich and diverse Latam financial ecosystem into a set of developer-friendly tools and APIs.

We’re a highly-technical, passionate and driven team. We have offices in Barcelona, Mexico City and São Paulo and some of us work remotely.

We are tackling a very challenging problem: connecting fintech innovators with legacy financial infrastructure. We strive to go beyond the limits of what is possible today and to do so in an elegant and developer-first way.

Belvo is using advanced techniques to access previously inaccessible financial data. We use a set of approaches, among which the analysis of consumer Android applications to infer implicit network APIs and endpoints.

The right candidate will need to be very familiar with how Android Apps work behind the scenes, the Android runtime, and techniques such as decompilation, deobfuscation and network traffic analysis. Cryptographic knowledge (PKI, Symmetric and Asymmetric encryption, certificates handling) will also be highly valuable.

• Studying Apps you don't have the source code for using tools like apktool, androguard, dextra, etc.
• Android Apps hooking and instrumentation (using tools such as Xposed or Frida).
• Dropping to kernel-level when needed, to apply patches and add instrumentation. Ability to build own kernel if necessary.
• Source code decompilation & deobfuscation.
• Network traffic analysis between Android applications and third-party network endpoints.
• Inferring behaviours and building proofs of concept to replicate application behaviour in other environments.
• Thinking outside the box applying strong lateral thinking. Solving problems that have no direct or obvious solution.
• Being perseverant and don’t giving up in the face of difficulty. We can’t always have a “plan b” (although we try to).
• No computer/information security experience required - we are more interested in software engineering backgrounds.

• Track record of past successes in reverse engineering Android applications
• Strong experience with Android internals and network protocols
• Willingness to solve challenging problems

Our tech stack:

• We’re building our platform using modern technologies, putting the focus on reliability and long-term maintainability
• We primarily use Python on the backend. We use battle-tested technologies such as Django, and we are heavy users of Python’s asyncio for some parts of our stack
• We use Javascript, Vue.js and Sass on the frontend. We are developing and leveraging our own design system and component library
• We run our infrastructure on top of Amazon Web Services, leveraging managed services. We tend to favor the use of managed services wherever possible, in order to focus on our business problems
• We observe and monitor our services using Datadog
• We follow Continuous Integration and Continuous Delivery best practices

• iOS experience
• Programming knowledge in Python or Javascript

We give the option to our employees to work fully remote or move to Barcelona to our HQ, where you can enjoy all of our perks, like the short beach distance or a pet-friendly office.

🏄 1.8km from the beach

🚀 Stock options (we are all owners and this is very important to us)

🔆 Flexible working hours

🔝 Remote friendly

🐶 Pet friendly

🍎 Meals, transport, and kindergarten via flexible compensation scheme

🎊 Paid time off on your birthday

🍒 Fresh fruit every week, all-you-can-drink tea and coffee

🍻 Friday happy hours after our weekly team meetings

🙋 Training Budget

😎 Team building events

🙀 Bank holidays swap inside the same month

🔋 Fitness/ wellness stipends

🚀 Yearly offsite