Pixalate, Inc.

Security Analyst / Ad Fraud Researcher

Lahore, Pakistan - Full Time

Security Analyst / Ad Fraud Researcher
Employment Type: Full-Time
Location: Remote, Pakistan (Lahore) 

About the Role
 Pixalate is hiring a Security Analyst / Ad Fraud Researcher to find, reverse-engineer and expose fraud schemes targeting mobile apps and Connected TV (CTV). You’ll treat ad fraud the way a threat researcher treats malware: collect samples, take them apart, turn what you learn into detection logic, and tell the market what you found. You’ll sit on the Threat Research team, working with Data Science, Engineering and Product. Your findings feed Pixalate’s MRC-accredited invalid traffic (IVT) detection and its public research on mobile and CTV supply-chain risk 

Key Research Areas & Responsibilities
  • Hunt mobile ad fraud: analyze Android and iOS apps (APKs/IPAs) for hidden ads, ad stacking, click injection, SDK spoofing, background ad loading and malicious ad SDKs
  • Investigate CTV fraud: uncover SSAI spoofing, device and app-bundle spoofing, emulator/server-side bot traffic, and fake CTV inventory sold programmatically
  • Reverse-engineer samples: use static and dynamic analysis to understand how fraudulent apps, SDKs and botnets behave, and document their traffic signatures
  • Turn research into detection: write rules, signatures and indicators for Pixalate’s GIVT and SIVT pipelines, and validate them against impression-level data at scale
  • Map the supply chain: trace fraud through app-ads.txt, sellers.json, SupplyChain objects and bid-stream data to identify the resellers and publishers behind it
  • Track threat actors: follow fraud operations over time, link campaigns to infrastructure, and monitor underground forums and app stores for new schemes
  • Publish and present: write blog posts, threat reports and research briefs; speak at industry events, webinars, and with press and clients
  • Support customers: help Customer Success and Sales explain findings to advertisers, DSPs, SSPs and platforms, and assist with escalated investigations

Required Qualifications
  • 5+ years in threat research, malware analysis or security analysis at a security vendor, SOC or research lab
  • Hands-on malware analysis: sandboxing, static and dynamic analysis, and reading decompiled or obfuscated code
  • Working knowledge of Android internals and app analysis tools (e.g. jadx, apktool, Frida, MobSF, Ghidra)
  • Network traffic analysis (Wireshark, mitmproxy, Burp) and spotting automated or anomalous traffic
  • SQL and a scripting language such as Python for analyzing large datasets
  • Track record of turning research into product intelligence: signatures, blocklists, classifiers or rules
  • Strong writing and presenting skills, with published blogs, reports or talks for technical and business audiences
 
Preferred Qualifications
  • Ad tech experience: OpenRTB, VAST/VPAID, SSAI, DSPs and SSPs
  • Familiarity with MRC IVT Guidelines, TAG and IAB Tech Lab standards (app-ads.txt, sellers.json, SupplyChain object)
  • CTV platform experience: Roku, Fire TV, Android TV, Samsung Tizen or LG webOS
  • Background in ransomware, botnet, phishing or cryptojacking research, and how that infrastructure is reused for ad fraud
  • Threat-intel tooling: YARA, VirusTotal, passive DNS and OSINT methods
  • Public research profile: named threat reports, recurring webinars or media commentary
About us

Pixalate is an online trust and safety platform that protects businesses, consumers and children from deceptive, fraudulent and non-compliant mobile, CTV apps and websites.

Our software and data have been used to unearth multiple high profile criminal and illegal surveillance cases including:

Our team of lawyers, data scientists, engineers, economists and researchers span globally with presence in California, New York, Washington DC , London and Singapore.

Apply: Security Analyst / Ad Fraud Researcher
* Required fields
First name*
Last name*
Email address*
Location *
Phone number*
Resume*

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

What’s your highest level of education completed?*
GPA*
LinkedInLinkedIn profile URL:*
Do you have at least 3 years of experience in a related field such as threat intelligence, cybersecurity, software development, or reverse engineering?*
Describe your experience with malware analysis or reverse engineering. Please provide a specific example where you successfully identified a threat or vulnerability.*
Are you familiar with using reverse engineering tools, and intrusion detection systems?*
Briefly explain your understanding of advertisement tags, command centers, and SDKs in the context of mobile or CTV environments.*
Do you have prior hands-on experience conducting threat intelligence analysis, malware reverse engineering, penetration testing, or digital forensics?*
How comfortable are you in producing technical reports and communicating findings to non-technical stakeholders?*
Describe a situation where you collaborated with other teams (e.g., product, engineering, or legal teams) to mitigate a cybersecurity threat*
Do you have experience with setting up Man in the Middle proxies to instrument applications?*
Briefly describe your understanding of common ad fraud techniques specifically within Mobile app or Connected TV (CTV) environments.*
Please provide an example of a time you reverse-engineered a mobile (Android/iOS) or CTV application. What tools did you use, and what was the objective or outcome of your analysis?*
Which of the following best describes your understanding of commonly used communications protocols (TCP, UDP, HTTPS, TLS)?*
How do you stay up-to-date with the latest trends and threats in the cybersecurity and ad fraud landscape?*
What is your expected monthly salary in PKR?*
What is your current notice period with your employer?*
Human Check*