Mobile Assessment Engineer in Samsung R&D Institute Ukraine

Job Description

White & black-box software vulnerability assessment of Android components:

• security review of Android mobile applications and firmware components
• risk analysis and security issues mitigation advisory
• exploitability Proof-of-Concepts development
• emerging threats research: new attack methods, (un)known security issues risks

Security validation is typically executed in 1-2 months iterations.

Major Requirements

• 2 years of practical experience in reverse-engineering (preferably *.apk and ARM binaries), software exploitation, binary and source code audit
• in-depth understanding of Android security architecture and typical security issues
• knowledge of Linux Kernel security architecture and Android-specific add-ons (IPC, SE Android, application security framework)
• ability to understand execution logic in C/C++, Java, Assembler; scripting skills
• good technical English, strong reporting and communication skills

Optional Requirements

• security background (University, relevant prior employment)
• participation in security contests (CTF), own write-ups publications, community activities
• hands-on experience with assessment automation tools (fuzzers, static source code analyzers)
• experience in reversing ( IDA Pro, JEB) reversing protected solutions (obfuscated/ packed code)
• applied crypto: knowledge of existing algorithms and protocols (AES/RSA/ECC/SHA, authentification/key exchange, digital signature, SSL/TLS)
• software exploitation experience
• awareness of security-related standards and best practices

Working Conditions

• official employment, as per Ukrainian labor law (regular employee) or GIG contract
• remote work is possible as well as work in Kyiv office

Benefits

• competitive salary, annual salary review, annual bonuses
• paid 28 work days of annual vacations and sick leaves
• opportunity to become an inventor of international patents with paid bonuses
• medical & life insurance for employees and their children
• paid lunches
• discounts to Samsung products
• regular education and self-development on internal courses and seminars
• hybrid work format, working in office is required for some tasks
  
  

About the company

Samsung is amazing place to work with great people in an outstanding environment.

With us you will have an opportunity to be a part of innovation that makes a real difference in lives of millions of people worldwide.

Samsung R&D Institute Ukraine (SR-Ukraine) is a part of Samsung Electronics global R&D network

Specialized in computer vision, context-aware intelligent services, graphics, augmented and virtual reality as well as information protection.

Надсилаючи своє резюме, Я, надаю ТОВ “Самсунг РнД Інститут Україна” (ЄДРПОУ 44648330) (надалі — “Компанія”) право на збір та обробку моєї перpersonal information, namely last name, first name and patronymic, date of birth, contact phone number, email address (hereinafter referred to as "Personal Data") with the purpose of using this data to search for and select candidates to fill the Company's vacant positions, fill the Company's recruiting database.

For this purpose, I grant the Company the right:

• to collection, storage, use of Personal Data;
• use of Personal Data to contact me and send me information about vacancy(s) in the Company;
• store Personal Data in the Company's recruiting database during the period of existence of such database;
• delete Personal Data from the Company's recruiting database at any time on discretion of the Company.

This Agreement is indefinite and may be revoked by me upon my written request to the address of Samsung R&D Institute Ukraine LLC: 01032, Kyiv, str. . Hetman Pavlo Skoropadsky, 57 or to the e-mail address: [email protected]< /span>