Embedded/Hardware Security Researcher

Samsung R&D Institute Ukraine is looking for a passionate and collaborative Embedded/Hardware Security Researcher to join our team in Kyiv.

If you love working directly on consumer-facing products we are glad to meet you at our team in Samsung R&D Institute Ukraine.

Embedded systems vulnerability assessment and HW related white/grey/blackbox penetration testing of Samsung mobile products:

• Perform security testing, including pentest of HW and low level firmware device components, security mechanisms
• Conduct risk analysis and security issues mitigation advisory for discovered issues
• Participate in exploitability Proof-of-Concepts development
• Monitor public sources, reproduce externally-reported  HW related vulnerabilities
• Research and monitor emerging threats, including new attack methods and new types of security issues

Requirements:

• Binary reverse-engineering experience
• Knowledge of digital schematics, logic analyzers, HW protocols (I2C, SPI, JTAG, UART), ROM / Bus / Periphery operation
• Understanding of typical software security issues (stack/heap exploitation, code injection, design flaws and oth.)
• Experience with disassemblers
• Proficiency with C/C++, Assemblers (x86/x86_64, ARM)

As a plus:

• Soldering skills, ability to modify the target device
• Embedded firmware reverse-engineering, software exploitation experience
• Experience with HW related attacks (ex. side channel analysis, Fault Injections, power analysis)
• Understanding of Linux Kernel architecture, ARM TrustZone, Secure Boot as a great plus
• Digital schematics and documentation analysis, PCB development skills as a plus
• Participation in security contests, CTFs 

Benefits:

• competitive salary, annual salary review, annual bonuses
• paid 28 work days of annual vacations and sick leaves
• opportunity to become an inventor of international patents with paid bonuses
• medical & life insurance for employees and their children
• paid lunches
• discounts to Samsung products, services
• regular education and self-development on internal courses and seminars
• hybrid work format, working in office is required for some tasks