8 дней назад
Android Vulnerability Researcher
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Android Vulnerability Researcher (Android Security): Performing vulnerability research across mobile application layers, kernels, TrustZone, bootloaders, firmware, chipsets, and operating-system versions with an accent on reverse engineering, exploit development, and security mitigations. Focus on discovering previously unpublished weaknesses, turning bugs into reliable exploits, and conducting long-term research into complex mobile architectures.
Location: Tel Aviv, Israel
Company
develops AI-powered digital investigation and forensic solutions for law enforcement agencies, intelligence organizations, and businesses.
What you will do
- Perform vulnerability research across mobile application layers, kernels, TrustZone, bootloaders, and firmware.
- Reverse engineer undocumented code without source code, symbols, or documentation.
- Discover previously unpublished weaknesses and develop reliable exploits.
- Validate exploits across different chipsets, vendors, and Android versions.
- Lead long-term, broad-scope security research projects as part of a wider research team.
Requirements
- Practical experience in vulnerability research and exploitation.
- Practical reverse engineering experience.
- Practical knowledge of current and emerging security mitigations.
- Advantage: knowledge of Android architecture and internals.
- Advantage: experience with ARM reversing, advanced fuzzing, cryptographic weaknesses, LLM-based research pipelines, or offensive hardware research and board design.
Culture & Benefits
- Work on security research integrated directly into digital investigation products.
- Research supports legally authorized investigations involving serious criminal cases.
- Collaborate on challenging problems within Security Research Labs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →