Security Researcher

As a Security Researcher, you will focus on analyzing automated threats targeting web applications and mobile ecosystems. 
You will reverse-engineer sophisticated bot frameworks—ranging from browser extensions and custom modified Chromium builds to mobile automation tools—and actively maintain and evolve the Akamai Mobile SDK to improve signal generation, anti-tampering defenses, and automated bot detection.

As a Security Researcher, you will dissect suspicious client applications, analyze custom automation binaries, and build defenses that impact millions of clients each day.You will be able to deepen knowledge of browser fingerprinting evasion, custom Chromium builds, browser extension security, mobile SDK architectures, application-layer protocols, and anti-bot mitigation strategies.Your findings and detection mechanisms will shape our product roadmap and directly power Akamai’s defensive capabilities against sophisticated, highly evasive automated threats.

As a Security Researcher, you will be responsible for:

 Update and maintain defensive telemetry collection mechanisms (including the Akamai Mobile SDK) to improve signal accuracy, runtime protection, and anti-tampering

 Dissect patched mobile applications, custom Chromium modifications, browser extensions, and stealth automation frameworks to uncover bypass methods, anti-bot evasion techniques, and scale-enabling tools

 Analyze large-scale web and mobile network traffic to identify browser fingerprint anomalies, protocol-level spoofs, and automated fraud vectors

·  Detection Logic: Partner with data science and engineering teams to convert reverse-engineering findings into automated, production-grade bot-mitigation rules

To be successful in this role you will:

• Have 3+ years of experience as a security researcher
• Have hands-on experience leveraging AI/LLM tools and AI coding agents to accelerate reverse engineering, automate deobfuscation, and scale code analysis
• Have a deep understanding of modern web and client automation frameworks, including the underlying techniques and architectures used to build, customize, and scale them
• Have deep expertise in analyzing, deobfuscating, and reverse engineering heavily obfuscated JavaScript and Java code
• Have proven experience analyzing browser extensions and customized/patched browser builds (e.g., custom Chromium variants designed to mimic human telemetry)
• Have hands-on experience with reverse engineering tools and frameworks such as Frida, Jadx, IDA Pro, Ghidra, or browser debugging APIs
• Have the ability to analyze and bypass mobile & browser security controls (e.g., canvas/TLS fingerprinting, code obfuscation, SSL pinning, root/jailbreak detection)
• Have a deep understanding of application-layer protocols (HTTP/S, WebSockets, gRPC) and modern web browser rendering engines
• Have proficiency in Python or Go to automate reverse-engineering workflows and script custom analysis tooling

At Akamai, we make life better for billions of people, trillions of times a day.
Whether you’re streaming live events, scrolling social media, watching your favorite series, or managing your savings, we’re the engine behind the scenes. We provide the world’s most distributed platform — from Cloud to Edge — to help the giants of the digital world work faster and stay more secure, making the internet a better experience for everyone.