Android Security Engineer APPLIED AI VR ANDROID New York, NY / On Site →

Zealot Labs, Inc.; Greater London; Hybrid; GBP 100,000 - 195,000; Full time

Benefits offered by this job

Equity

Job summary

Zealot Labs, Inc. in London, United Kingdom is seeking an experienced Android vulnerability researcher to join a small, high-ownership team. You will identify, exploit, and triage vulnerabilities across Android OS, apps, and firmware, and you will build tooling to automate discovery and triage for mobile platforms.

We value strong reverse engineering skills and a proven CVE/bug bounty track record. You will work on ARM/AArch64, kernel internals, and modern Android security surfaces, using Frida,

Qualifications

• Demonstrated Android vulnerability research experience.
• Exploit development and kernel experience are strong pluses.
• Proven security research capability against mobile platforms.

Responsibilities

• Discover and exploit vulnerabilities in Android OS, apps, and firmware.
• Develop exploit chains across OEMs and chipset vendors.
• Build tooling to automate vulnerability discovery and triage across Android.
• Research new attack surfaces introduced by Android updates and patches.
• Deep experience with Android internals: kernel, HAL, Binder IPC, SELinux.
• Proven track record of finding and exploiting Android CVEs or in bug bounties.
• Strong ARM/AArch64 reverse engineering and exploit development skills.
• Proficiency with Frida, Magisk, custom kernels, and Android debug tooling.
• Strong C/C++ and Java/Kotlin skills for systems and app analysis.

Skills

Android vulnerability research

Exploit development

Reverse engineering

C/C++

Java/Kotlin

Android kernel debugging

Frida

Magisk

Android internals

Tools

Ghidra

IDA

Binary Ninja

Job description

Zealot is deploying AI systems at the center of western cyber operations , backed by tier-1 US VCs and industry leaders. Our team includes alumni of Anthropic, xAI, and Anduril. Soon live with close U.S. allies abroad.

APPLIED AI VR ANDROID

Compensation 100K-195K + skin in the game equity

Location London, United Kingdom On Site

Stage Early-stage startup backed by tier 1 investors. Small, growing team with exceptionally high ownership.

• + Discover and exploit vulnerabilities in Android operating systems, applications, and firmware.
• + Develop exploit chains targeting Android devices across multiple OEMs and chipset vendors.
• + Build tooling to automate vulnerability discovery and triage across the Android ecosystem.
• + Research new attack surfaces introduced by Android platform updates and security patches.
• + Deep experience with Android internals: kernel, HAL, Binder IPC, SELinux policies.
• + Proven track record of finding and exploiting vulnerabilities in Android (CVEs, bug bounties, or security research).
• + Strong ARM/AArch64 reverse engineering and exploit development skills.
• + Proficiency with Frida, Magisk, custom kernels, and Android debug tooling.
• + Strong C/C++ and Java/Kotlin skills for systems and application-level analysis.

Nice to Have

• + Experience with Qualcomm, MediaTek, or Samsung Exynos chipset-specific attack surfaces.
• + Familiarity with TrustZone / TEE internals.
• + Experience with Android kernel fuzzing (syzkaller, custom harnesses).
• + Proficiency with Ghidra, IDA, or Binary Ninja.
• + Experience building with LLMs and AI agents.
• + Published research or conference talks in mobile security.
• + Driven to push the boundaries of what's possible in mobile security.
• + Clearly interested in stepping away from purely manual research and moving toward the development of AI systems.
• + Building something massive matters more to you than comfort, titles, or predictability.
• + You want to be early at a company that will change an industry, and you're ready to do what that actually takes.

Note to recruiting firms: Android vulnerability research is the core requirement. Exploit development and kernel experience are strong pluses. Strong preference for candidates with demonstrated security research capability against mobile platforms.

Ready?