שי מרדכי

I’m a Malware Researcher focused on reverse engineering, Android internals, and execution-flow analysis. I perform static and dynamic analysis of Android malware to trace what code actually does across complex codebases.

In my self-directed security research, I combine JADX, Frida, and native analysis to reconstruct execution flow, map trust boundaries, and study anti-analysis behavior. I translate Android internals into practical methodologies for runtime instrumentation and behavioral malware analysis.

I’m also experienced in application security validation through a Secure SDLC lens, where I validated SAST/SCA findings by tracing static issues to actual runtime behavior. That work helped distinguish real exploitability from theoretical risk, and I supported engineering teams with threat modeling, manual code reviews, and remediation guidance.

My interests extend to OS-level enforcement and cross-boundary interactions—investigating permission enforcement and IPC pathways through targeted proof-of-concept development. I enjoy building research labs that model practical attack techniques, including IPC abuse, dynamic code loading, and network/TLS analysis.