Android Vulnerability Researcher

CENSUS; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Birthday

Paid Day off

Office snacks

Medical & Life Insurance

Funded certifications

Recognition programs

International exposure

Growth opportunities

Job summary

CENSUS is seeking an Android Vulnerability Researcher to join our hands-on, low-level security research team. You will discover, document and exploit vulnerabilities in Android userland and kernel, and contribute exploit chains, tooling and proof-of-concept demonstrations.

Work with international clients and a global security-focused team. Strong knowledge of AArch64/x86_64, code auditing, fuzzing and Android debugging is required; Kotlin, Python and Rust are a plus.

Qualifications

• Strong problem solving, analytical and presentation skills.
• Deep knowledge of computer architecture concepts and assembly with a focus on AArch64 and x86_64.
• Code auditing skills for C, C++, Java/JNI.
• Python, Rust and Kotlin are considered a plus.
• Reverse engineering skills for the above architectures.
• Experience with Android debugging and its idiosyncrasies, preferably both userland and kernel.
• Ability to design and develop fuzzing techniques.
• Be confident with the Android ecosystem; building and modifying AOSP, updating and rooting devices, developing tools and applications for proof-of-concept etc.
• Fluent in English.
• Good communication skills.

Responsibilities

• Work as part of a team. Ability to work independently with minimal supervision.
• Understand interactions between Android components, map the attack surface and come up with novel attack scenarios and vulnerabilities.
• Understand existing exploit chains, test, port and maintain their components.
• Document findings and convey the information to the rest of the team.

Skills

Problem solving

Analytical skills

Presentation skills

Computer architecture

Assembly language

C/C++

Java/JNI

Reverse engineering

Android debugging

Fuzzing techniques

AOSP

English fluency

Communication

Job description

Описание:

CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com. CENSUS is looking for an Android Vulnerability Researcher specializing in the discovery, documentation and exploitation of software vulnerabilities, utilizing code auditing, reverse engineering and security testing methodologies. Projects will target the Android ecosystem, usually userland and kernel, but bootloaders, hypervisors and TEEs are also possible. This is a hands-on, low-level research role that will require the development of exploit code and advanced chaining and post-exploitation techniques, beyond a simple proof-of-conception.

Задачи:

Work as part of a team. Ability to work independently with minimal supervision. Understand interactions between Android components, map the attack surface and come up with novel attack scenarios and vulnerabilities. Understand existing exploit chains, test, port and maintain their components. Document findings and convey the information to the rest of the team.

Требования:

• Strong problem solving, analytical and presentation skills.
• Strong understanding of computer architecture concepts and assembly language with a focus on AArch64 and x86_64.
• Code auditing skills for C, C++, Java/JNI.
• Python, Rust and Kotlin are considered a plus.
• Reverse engineering skills for the above architectures.
• Experience with Android debugging and its idiosyncrasies, preferably both userland and kernel.
• Ability to design and develop fuzzing techniques.
• Be confident with the Android ecosystem; building and modifying AOSP, updating and rooting devices, developing tools and applications for proof-of-concept etc.
• Fluent in English.
• Good communication skills.

Условия:

Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.

The chance to be part fast-growing, global cybersecurity company A collaborative, purpose-driven team with a strong learning mindset

• Birthday
• Paid Day off
• Coffee, lunch and office snacks free of charge
• Private Medical and Life Insurance covering employees & family members
• Funded certifications & postgraduate programs
• Recognition programs including a welcome gift, a new year celebration gift, referral bonus and long service vouchers
• Exposure to international teams, leaders, and challenges
• Opportunities for professional growth, development, innovation, and more!

CENSUS is an equal opportunity employer.

The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status.

The Company also makes reasonable accommodations for disabled employees.

Finally, the Company prohibits the harassment of any individual based on their protected status.

This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.

LI | Remote