Junwei Song
Senior Malware Research Analyst at Recorded Future
Amsterdam, North Holland, Taiwan
Summary
🤩
Rockstar🎓
Top SchoolJunwei Song is a senior malware research analyst with a decade of experience focused on reverse engineering, Android malware analysis, and threat intelligence. Currently at Recorded Future’s Triage Sandbox, he builds advanced signatures and extractors while publishing actionable research for the security community. He created and maintains Quark-Engine—an AI-powered Android APK analyst integrated into Kali Linux—and contributes documentation improvements to the widely used Androguard project. A long-time community organizer and mentor, Junwei served as PyCon APAC 2022 Program Chair and has guided GSoC work under the Honeynet Project. His talks at Black Hat Asia, DEFCON BTV, Virus Bulletin and other conferences reflect a practical blend of tooling, automation, and deep technical insight. Based in Amsterdam with roots in Taiwan, he brings both hands-on engineering and open-source stewardship to malware research.
10 years of coding experience
3 years of employment as a software developer
Bachelor's degree, Computer/Information Technology Administration and Management, Bachelor's degree, Computer/Information Technology Administration and Management at National University of Kaohsiung
English, Chinese
Github Skills (8)
python10
android10
documentation10
api-design9
reverse-engineering9
json9
dex8
ai7
Programming languages (10)
Github contributions (5)
ev-flow/quark-engine
Oct 2019 - Oct 2021
Role in this project:
Back-end Developer
Back-end DeveloperContributions:33 releases, 33 reviews, 362 commits in 2 years
Contributions summary:Junwei contributed to the core functionality of the Quark Agent, an AI-powered Android APK analyzer. Their work involved implementing features to extract and analyze permissions, methods, and code combinations within Android applications. The user also refactored code for better formatting and efficiency, integrating analysis of code behavior with rules defined in external JSON files. Further, they contributed by adding new features that can output Android API usages.
security-vulnerability-assessmentchecklistvulnerabilitiessecurityblackbox-testing
androguard/androguard
Oct 2019 - Jul 2022
Reverse engineering and pentesting for Android applications
Role in this project:Technical Writer
Technical WriterContributions:17 commits, 8 PRs, 23 comments in 2 years 9 months
Contributions summary:Junwei primarily contributed to the documentation of the androguard project. Their work focused on fixing typos, improving clarity, and adding examples to existing documentation files such as those related to basic blocks, instructions, sessions, certificates, and more. Furthermore, the user enhanced the documentation by adding examples of how to get Android API usage, thereby improving the project's usability and understanding. These contributions show the user's focus on improving project accessibility through clear and accurate documentation.
android-applicationandroid-applicationspentestingreverse-engineeringandroid
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.