CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.
About the Role
CENSUS is looking for an Android Vulnerability Researcher specializing in the discovery, documentation and exploitation of software vulnerabilities, utilizing code auditing, reverse engineering and security testing methodologies.
Projects will target the Android ecosystem, usually userland and kernel, but bootloaders, hypervisors and TEEs are also possible.
This is a hands-on, low-level research role that will require the development of exploit code and advanced chaining and post-exploitation techniques, beyond a simple proof-of-concept.
Requirements
- Strong problem solving, analytical and presentation skills.
- Strong understanding of computer architecture concepts and assembly language
- with a focus on AArch64 and x86_64.
- Code auditing skills for C, C++, Java/JNI. Python, Rust and Kotlin are
- considered a plus.
- Reverse engineering skills for the above architectures.
- Experience with Android debugging and its idiosyncrasies, preferably both
- userland and kernel.
- Ability to design and develop fuzzing techniques.
- Be confident with the Android ecosystem; building and modifying AOSP,
- updating and rooting devices, developing tools and applications for
- proof-of-concept etc.
- Fluent in English.
- Good communication skills.
Responsibilities
- Work as part of a team.
- Ability to work independently with minimal supervision.
- Understand interactions between Android components, map the attack surface
- and come up with novel attack scenarios and vulnerabilities.
- Understand existing exploit chains, test, port and maintain their components.
- Document findings and convey the information to the rest of the team.
What We Offer
Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.
The chance to be part fast-growing, global cybersecurity company
A collaborative, purpose-driven team with a strong learning mindset
Competitive salary and benefits, such as but not limited to:
- Birthday Paid Day off
- Coffee, lunch and office snacks free of charge
- Private Medical and Life Insurance covering employees & family members
- Funded certifications & postgraduate programs
- Recognition programs including a welcome gift, a new year celebration gift, referral bonus and long service vouchers
- Exposure to international teams, leaders, and challenges
- Opportunities for professional growth, development, innovation, and more!
Apply today to start the conversation with the People & Culture Team.
CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.
LI | Remote