Offensive Security Researcher - Android

Epsilon; Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Parental leave

Retirement plans

Relocation support

Wellness programs

Meal and transportation allowances

Other location-specific perks

Résumé du poste

Epsilon Security is a research lab focused on high-end vulnerabilities on mobile platforms and browsers, providing initial access into systems. This role centers on Android and its derivatives, covering remote attack surfaces and exploring research areas such as messaging apps, media frameworks, baseband, and native OS components.

You will work in a collaborative team to build end-to-end security solutions in a highly technical and international environment.

Qualifications

• Reverse engineering experience with tools such as IDA Pro or Ghidra.
• Proven vulnerability research experience.
• Knowledge of vulnerability classes and remote attack surface exploitation techniques.
• Strong understanding of Android design and components.
• Excellent collaboration and written English skills.

Responsabilités

• Investigate Android and related components to identify vulnerabilities across remote attack surfaces.
• Collaborate in a team to develop end-to-end security research solutions.
• Focus research on areas like messaging apps, media parsing, baseband, and network-facing protocols.

Description du poste

Summary

Epsilon Security is a research lab seeking high-end vulnerabilities on mobile platforms, browsers and is tailored to provide initial access into systems.

Role Description

Our team engages in various activities like vulnerability research, binary exploitation, security tooling development, fuzzing, machine learning, and much more. This role is primarily focused on Android and its derivatives. You will cover all its remote attack surface and can be led conducting research on messaging application, media frameworks, baseband, native OS components or any other network-reachable components. Everyone has its own speciality. You will work in a team-work environment to help build end-to-end solutions.

This job is for individuals with great technical skills and a relentless passion to tackle genuinely hard problems.

If that rings a bell and even if you’re unsure about your technical level, we’d love to hear from you.

In-office roles in Paris, Barcelona. Remote is considered for experienced candidates.

Minimum Qualifications

• Experience in reverse engineering and tools such as IDA Pro, Ghidra
• Proven experience in vulnerability research
• Strong understanding of common vulnerability classes and exploitation techniques relevant to remote attack surfaces, such as memory corruption, logic errors, and type confusion etc.
• Great understanding of Android overall design and components
• Great collaboration skill
• Fluent in english and great writing skills

Preferred Qualifications

• Experience in auditing messaging applications, media parsing libraries, or other network-facing protocols attack surfaces
• Ability to apply AI techniques and tools, such as LLMs or Machine Learning, for security research
• Familiarity with greybox fuzzing
• Tool development and familiarity with Android SDK / NDK

What We Offer

We offer a highly technical and international environment with regular meetups and an annual team retreat. Compensation includes healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

• healthcare coverage
• parental leave
• retirement plans
• relocation support
• wellness programs
• meal and transportation allowances
• other location-specific perks