格步
Software Engineer - Reverse engineering
Software Engineer - Reverse engineering
发布于 3 天前普通员工/个人贡献者
北京市
高级经验
全职员工
仅现场办公
本科
Aws Dynamodb
Data Acquisition
Reverse Engineering
Frida
Ida
Xposed
Anti-Fraud
AI 估算 · 25k–40k
北京高级工程师，逆向工程稀缺技能，大厂平台，薪资竞争力强
职位详情
关于这个职位
加入Grab北京研发中心，担任逆向工程方向的高级软件工程师，负责大规模数据采集平台的架构设计与开发
你将与东南亚多国团队协作，解决高并发、实时系统的挑战，利用逆向工程技术提升反欺诈能力
适合具备扎实后端功底和逆向经验的技术专家
最低要求
A degree in Computer Science, Software Engineering, Information Technology or related fields, Strong Computer Science fundamentals in algorithms and data structures
+ years of experience in software engineering, 1+ years of experience in reverse engineering
Experience in developing large scale data acquisition platforms and data processing at scale with high throughput and scalability.
Proficiency in maintaining operational excellence and site reliability, including familiarity with monitoring system performance, ensuring system health, and managing service capacity planning.
Possess excellent communication, sharp analytical abilities with proven design skills, and the ability to think critically of the current system in terms of growth and stability
You are a good coder in any language (C++, Java, Scala, Rust, Python, Ruby, etc.), but willing to work on Golang
Reverse Engineering & Tools - Proficiency with IDA, JEB, Jadx, Ghidra; experience with static/dynamic analysis, unpacking, and deobfuscation
Hook Frameworks - Deep expertise in Frida and Xposed/LSPosed; familiarity with Magisk and root environment customization
Anti-Fraud & Bypass Techniques - Experience with device fingerprint evasion, root/detection bypass, SSL pinning and encryption bypass
工作职责
You will design, develop, and maintain robust and scalable data acquisition platforms within a microservices architecture, and solve the challenges during data acquisition.
You will lead medium to complex projects independently. This includes defining technical designs and solutions, driving the alignment with stakeholders, adhering to best coding practices, and addressing non-functional requirements.
You will implement best practices and coding standards to ensure the reliability, performance, and security of our backend systems.
You will write clean, maintainable, and efficient code, and conduct code reviews to ensure code quality and adherence to software development best practices.
You will optimize and enhance existing backend systems for improved performance and scalability.
You will troubleshoot and resolve complex backend issues and system failures, ensuring resolution to minimize impact on production environments.
优先资格
Security & Offensive Experience - Red-blue exercises, CTF/SRC contributions, experience with China major apps
Expert knowledge in databases, including relational databases such as MySQL and NoSQL databases like AWS DynamoDB, Scylla, and others, accompanied by a distinct understanding of various design decision implications.
Experience in coaching and mentoring junior developers, providing guidance on coding standards, and promoting a collaborative learning environment within the team.
Demonstrate a keen sense of product thinking, being able to align technical strategies with product goals, and understanding how development decisions can directly impact end-users.
AI 洞察
优缺点分析
优点
- 逆向工程技能稀缺，职业壁垒高，薪资溢价明显
- 团队分布多国，能积累国际化协作经验
- 技术栈现代（Golang、微服务、云原生），利于长期发展
- 逆向工程工作强度大，需持续应对安全攻防对抗
- 需要掌握多种工具和框架，学习曲线陡峭
- 适合对逆向工程有浓厚兴趣、享受技术攻坚、追求高薪的技术专家
缺点 / 挑战
- Grab是东南亚独角兽，业务增长快，平台大，技术挑战多
- 涉及高并发系统，故障排查和性能优化压力较大
角色解读
- 成为逆向工程与反欺诈领域的专家，带领技术攻关
- 向技术架构师或技术经理方向发展，扩大系统影响力
- 在东南亚领先的超级应用平台，接触前沿的分布式系统挑战
- 设计并实现大规模数据采集系统，处理高并发实时数据
- 运用逆向工程工具（IDA、Frida等）分析应用，开发反欺诈与绕过技术
- 与分布式团队协作，负责项目技术方案与交付
- 精通逆向工程（静态/动态分析、脱壳、混淆处理）和Hook框架（Frida、Xposed）
- 扎实的后端开发能力，愿意使用Golang，熟悉微服务架构
- 了解反欺诈与绕过技术（设备指纹、root检测绕过、SSL pinning绕过）
申请策略
- 了解Grab的东南亚市场背景，面试时展现对业务的理解
- 准备一个完整的逆向分析或数据采集项目案例，从需求到实现
- 突出逆向工程实战项目，如脱壳、Hook、反检测等
- 强调后端开发经验，尤其是高并发数据采集平台
- 展示参与的CTF、SRC或红蓝对抗经历
- 列出熟悉的工具链（IDA、Frida、Ghidra等）和编程语言
- 如果Golang不熟，快速学习Golang的基础与并发模型
- 深入练习Frida脚本编写和Android逆向案例
面试指南
- STAR法则：描述情境、任务、行动、结果，突出技术细节和思考过程
- 对于逆向问题，可以分步骤讲解：分析目标、选择工具、实施Hook、绕过检测、验证结果
- 设计系统时，先从需求出发，再考虑架构选型（微服务、消息队列、数据库），最后权衡一致性与可用性
- 请描述一个你使用Frida进行Hook的案例，遇到了什么困难？
- 如何设计一个高可用的数据采集系统，应对目标应用的反爬措施？
- 解释设备指纹的实现原理以及如何绕过常见检测？
- 你在Golang中使用过哪些并发模式？如何保证数据一致性？
- 如何处理大规模数据采集中的性能瓶颈？
匹配度报告
70
综合匹配度
大厂高薪、前沿逆向技术栈、国际化团队，但WLB一般、仅现场办公。
适合人群
适合追求技术成长和高薪、能接受高强度工作、对逆向工程充满热情的求职者。
最强匹配
成长发展匹配
最弱匹配
工作生活匹配
薪资福利85
成长发展90
工作生活40
使命价值65
薪资福利匹配
85较高
大厂背景、高薪水平，福利完善（保险、弹性福利），满足物质需求。
薪资信号未披露（AI估算：25K-40K/月）
福利待遇Term Life Insurance、Medical Insurance、GrabFlex、Parental leave、Birthday leave、Love-all-Serve-all (LASA) volunteering leave、Grabber Assistance Programme、FlexWork arrangements
成长发展匹配
90较高
逆向工程前沿技术，涉及高并发分布式系统，成长空间大，团队国际化。
技术前沿前沿/新兴技术
技术栈Reverse Engineering、IDA、Frida、Xposed、Golang、Microservices、AWS DynamoDB
成长机会coaching and mentoring junior developers、guide junior engineers
业务类型ambiguous
工作生活匹配
40较低
仅现场办公，未提及弹性工时，互联网大厂工作强度可能较大。
工作模式仅现场办公
办公地点未明确
加班情况未提及（无法判断）
工作生活平衡FlexWork arrangements
使命价值匹配
65中等
岗位支撑东南亚出行与配送服务，有一定社会价值，但使命信号较弱。
行业发展高速增长赛道
社会影响中性/一般
使命信号empowering everyone、driving Southeast Asia forward
创新程度积极采用新技术
Watch Jobs