Android Vulnerability Researcher

CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.

About the Role

CENSUS is looking for an Android Vulnerability Researcher specializing in the discovery, documentation and exploitation of software vulnerabilities, utilizing code auditing, reverse engineering and security testing methodologies.

Projects will target the Android ecosystem, usually userland and kernel, but bootloaders, hypervisors and TEEs are also possible.

This is a hands-on, low-level research role that will require the development of exploit code and advanced chaining and post-exploitation techniques, beyond a simple proof-of-concept.

Requirements

• Strong problem solving, analytical and presentation skills.
• Strong understanding of computer architecture concepts and assembly language
• with a focus on AArch64 and x86_64.
• Code auditing skills for C, C++, Java/JNI. Python, Rust and Kotlin are
• considered a plus.
• Reverse engineering skills for the above architectures.
• Experience with Android debugging and its idiosyncrasies, preferably both
• userland and kernel.
• Ability to design and develop fuzzing techniques.
• Be confident with the Android ecosystem; building and modifying AOSP,
• updating and rooting devices, developing tools and applications for
• proof-of-concept etc.
• Fluent in English.
• Good communication skills.

Responsibilities

• Work as part of a team.
• Ability to work independently with minimal supervision.
• Understand interactions between Android components, map the attack surface
• and come up with novel attack scenarios and vulnerabilities.
• Understand existing exploit chains, test, port and maintain their components.
• Document findings and convey the information to the rest of the team.

What We Offer

Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.

The chance to be part fast-growing, global cybersecurity company

A collaborative, purpose-driven team with a strong learning mindset

Competitive salary and benefits, such as but not limited to:

Birthday Paid Day off

Coffee, lunch and office snacks free of charge

Private Medical and Life Insurance covering employees & family members

Funded certifications & postgraduate programs

Recognition programs including welcome gift, new year celebration gift, referral bonus and long service vouchers

Exposure to international teams, leaders, and challenges

Opportunities for professional growth, development, innovation, and more!

Apply today to start the conversation with People & Culture Team.

LI | Remote

Originally posted on Himalayas