Pixalate is hiring a Security Analyst / Ad Fraud Researcher to identify and analyze fraud schemes targeting mobile apps and Connected TV (CTV). The role involves reverse-engineering fraudulent apps and SDKs, developing detection logic, and collaborating with Data Science, Engineering, and Product teams. Responsibilities include hunting mobile ad fraud, investigating CTV fraud, reverse-engineering samples, creating detection rules, mapping the supply chain, tracking threat actors, publishing research, and supporting customers. Required qualifications include 5+ years in threat research or security analysis, hands-on malware analysis skills, knowledge of Android internals and app analysis tools, network traffic analysis expertise, proficiency in SQL and Python, experience turning research into product intelligence, and strong communication skills. Preferred qualifications include ad tech experience, familiarity with industry standards, CTV platform experience, background in ransomware or botnet research, threat-intel tooling knowledge, and a public research profile. The position is full-time and remote, based in Lahore, Pakistan.
What you'll do
Hunt mobile ad fraud: analyze Android and iOS apps (APKs/IPAs) for hidden ads, ad stacking, click injection, SDK spoofing, background ad loading and malicious ad SDKs
Similar jobs
More roles worth a look
Related opportunities based on specialty and working model so candidates can keep momentum.
Alberta, Canada; British Columbia, Canada; Calgary, Canada; California, United States; New York, US; Ontario, Canada; Seattle, United States; Toronto, Canada; Vancouver, Canada; Washington, United States•14 months ago
Investigate CTV fraud: uncover SSAI spoofing, device and app-bundle spoofing, emulator/server-side bot traffic, and fake CTV inventory sold programmatically
Reverse-engineer samples: use static and dynamic analysis to understand how fraudulent apps, SDKs and botnets behave, and document their traffic signatures
Turn research into detection: write rules, signatures and indicators for Pixalate’s GIVT and SIVT pipelines, and validate them against impression-level data at scale
Map the supply chain: trace fraud through app-ads.txt, sellers.json, SupplyChain objects and bid-stream data to identify the resellers and publishers behind it
Track threat actors: follow fraud operations over time, link campaigns to infrastructure, and monitor underground forums and app stores for new schemes
Publish and present: write blog posts, threat reports and research briefs; speak at industry events, webinars, and with press and clients
Support customers: help Customer Success and Sales explain findings to advertisers, DSPs, SSPs and platforms, and assist with escalated investigations
Requirements
5+ years in threat research, malware analysis or security analysis at a security vendor, SOC or research lab
Hands-on malware analysis: sandboxing, static and dynamic analysis, and reading decompiled or obfuscated code
Working knowledge of Android internals and app analysis tools (e.g. jadx, apktool, Frida, MobSF, Ghidra)
Network traffic analysis (Wireshark, mitmproxy, Burp) and spotting automated or anomalous traffic
SQL and a scripting language such as Python for analyzing large datasets
Track record of turning research into product intelligence: signatures, blocklists, classifiers or rules
Strong writing and presenting skills, with published blogs, reports or talks for technical and business audiences
