Android Exploitation Engineer APPLIED AI VR ANDROID New York, NY / On Site →

Zealot Labs, Inc.; New York, Northern (NY, KY); Hybrid; USD 100,000 - 195,000; Full time

Benefits offered by this job

Equity

Job summary

Zealot Labs, Inc. in New York, NY is seeking an experienced Android security researcher to discover and exploit vulnerabilities across Android OS, apps, and firmware.

You will develop exploit chains covering multiple OEMs and chipsets, and build tooling to automate vulnerability discovery and triage.

Qualifications

• Experience in Android security research and exploit development.
• Strong C/C++ and Java/Kotlin skills for analysis.
• Proven track record in Android vulnerabilities (CVEs or bug bounties).

Responsibilities

• Discover and exploit vulnerabilities in Android OS, apps, and firmware.
• Develop exploit chains across OEMs and chipsets.
• Build tooling to automate vulnerability discovery and triage.
• Research new attack surfaces from platform updates.
• Deep experience with Android internals: kernel, HAL, Binder IPC, SELinux.
• Demonstrate strong ARM/AArch64 reverse engineering and exploit skills.
• Proficiency with Frida, Magisk, custom kernels, and Android debugging tools.

Skills

C/C++

Java/Kotlin

Reverse engineering

Exploit development

Android security

Debug tooling

Tools

Frida

Magisk

Custom kernels

Android debugging tooling

Ghidra

IDA

Binary Ninja

Job description

Zealot is deploying AI systems at the center of western cyber operations , backed by tier-1 US VCs and industry leaders. Our team includes alumni of Anthropic, xAI, and Anduril. Soon live with close U.S. allies abroad.

APPLIED AI VR ANDROID

Compensation 100K-195K + skin in the game equity

Location New York, NY On Site

Stage Early-stage startup backed by tier 1 investors. Small, growing team with exceptionally high ownership.

• + Discover and exploit vulnerabilities in Android operating systems, applications, and firmware.
• + Develop exploit chains targeting Android devices across multiple OEMs and chipset vendors.
• + Build tooling to automate vulnerability discovery and triage across the Android ecosystem.
• + Research new attack surfaces introduced by Android platform updates and security patches.
• + Deep experience with Android internals: kernel, HAL, Binder IPC, SELinux policies.
• + Proven track record of finding and exploiting vulnerabilities in Android (CVEs, bug bounties, or offensive work).
• + Strong ARM/AArch64 reverse engineering and exploit development skills.
• + Proficiency with Frida, Magisk, custom kernels, and Android debug tooling.
• + Strong C/C++ and Java/Kotlin skills for systems and application-level analysis.

Nice to Have

• + Experience with Qualcomm, MediaTek, or Samsung Exynos chipset-specific attack surfaces.
• + Familiarity with TrustZone / TEE exploitation.
• + Experience with Android kernel fuzzing (syzkaller, custom harnesses).
• + Proficiency with Ghidra, IDA, or Binary Ninja.
• + Experience building with LLMs and AI agents.
• + Published research or conference talks in mobile security.
• + Driven to push the boundaries of what's possible in mobile offensive security.
• + Clearly interested in stepping away from purely manual research and moving toward the development of AI systems.
• + Building something massive matters more to you than comfort, titles, or predictability.
• + You want to be early at a company that will change an industry, and you're ready to do what that actually takes.