Remote Android Vulnerability Researcher

CENSUS SA; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Private Medical Insurance

Life Insurance

Certifications funded

Welcome gift

Long service vouchers

Office snacks

Job summary

CENSUS is seeking an Android Vulnerability Researcher to explore, document and exploit software vulnerabilities in the Android ecosystem. The role focuses on userland and kernel areas, with potential exposure to bootloaders and TEEs, requiring hands-on, low-level research and exploit development.

The candidate will work on problem-rich challenges, develop fuzzing techniques, and document findings for a global security team. Fluency in English and strong communication are essential.

Qualifications

• Strong problem solving, analytical and presentation skills.
• Solid understanding of computer architecture concepts and assembly language (AArch64/x86_64).
• Code auditing skills for C, C++, Java/JNI; Python, Rust and Kotlin are a plus.
• Reverse engineering skills for the listed architectures.
• Experience with Android debugging (userland and kernel).
• Ability to design and develop fuzzing techniques.
• Fluent in English; good communication skills.

Responsibilities

• Work as part of a team.
• Work independently with minimal supervision.
• Understand interactions between Android components and map the attack surface to identify novel vulnerabilities.
• Understand existing exploit chains, test, port and maintain components.
• Document findings and convey information to the team.

Skills

Problem solving

Analytical thinking

Presentation skills

AArch64

x86_64

Code auditing

C/C++

Java/JNI

Python

Rust

Kotlin

Reverse engineering

Android debugging

Fuzzing techniques

English fluency

Communication

Job description

CENSUS is seeking an Android Vulnerability Researcher to explore, document and exploit software vulnerabilities in the Android ecosystem. The role focuses on userland and kernel areas, with potential exposure to bootloaders and TEEs, requiring hands-on, low-level research and exploit development.

The candidate will work on problem-rich challenges, develop fuzzing techniques, and document findings for a global security team. Fluency in English and strong communication are essential.