Samsung R&D Institute Ukraine

Samsung R&D Institute Ukraine is looking for a passionate and collaborative Software Penetration Tester to join our team.

More specifically:

Vulnerability assessment and penetration testing of various Linux OS security components and mechanisms:

- vulnerability assessment of Samsung mobile security software: security source code review (white box) and binary analysis (black box)

- secure SDLC process support (including requirements, design security review)

- emerging threats research: new attack methods, (un)known security issues risks

Major Requirements:

- 2+ years of hands-on experience with white and black box software penetration testing and vulnerability assessment

- understanding of typical software security issues (memory corruptions, various injections, arithmetic overflows, etc.) and how to protect against them

- good experience with C/C++, scripting languages, assembly (Arm preferred)

- ability to document and describe discovered security issues

Optional Requirements:

- exploitation experience

- understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.).

- Rust language knowledge

- tools: experience with fuzzers, disassemblers, debuggers, assessment automation tools

- cryptography: exploitation experience (weak keys, bruteforce, weak crypto, etc.)

- experience with assessing protected solutions (obfuscated / packed code)

Working Conditions:

- official employment - GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

- paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks

Samsung R&D Institute Ukraine is looking for a passionate and collaborative Mobile Assessment Engineer to join our team in Kyiv.

If you love working directly on consumer-facing products we are glad to meet you at our team in Samsung R&D Institute Ukraine.

 

More specifically, you will provide White & black-box software vulnerability assessment of Android components:

— security review of Android mobile applications and firmware components

— risk analysis and security issues mitigation advisory

— exploitability Proof-of-Concepts development

— emerging threats research: new attack methods, (un)known security issues risks

Security validation is typically executed in 1-2 months iterations.

Major Requirements:

— in-depth understanding of Android security architecture and typical security issuesin-depth understanding of Android security architecture and typical security issues

— practical experience in reverse-engineering (preferably *.apk and ARM binaries), software exploitation, binary and source code audit

— knowledge of Linux Kernel security architecture and Android-specific add-ons (IPC, SE Android, application security framework)

— ability to understand execution logic in C/C++, Java, Assembler; scripting skills

— good technical English, strong reporting and communication skills

Optional Requirements:

— security background (University, relevant prior employment)

— participation in security contests (CTF), own write-ups publications, community activities

— hands-on experience with assessment automation tools (fuzzers, static source code analyzers)

— experience in reversing ( IDA Pro, JEB) reversing protected solutions (obfuscated/ packed code)

— applied crypto: knowledge of existing algorithms and protocols (AES/RSA/ECC/SHA, authentification/key exchange, digital signature, SSL/TLS)

— software exploitation experience

— awareness of security-related standards and best practices

Working Conditions:

— GIG contract

— remote work is possible as well as work in Kyiv office

Benefits:

— competitive salary, annual salary review, annual bonuses

— paid 28 work days of annual vacations and sick leaves

— opportunity to become an inventor of international patents with paid bonuses

— medical & life insurance for employees and their children

paid lunches

— discounts to Samsung products, services

— regular education and self-development on internal courses and seminars

— hybrid work format, working in office is required for some tasks

Samsung R&D Institute Ukraine is looking for a passionate and collaborative Embedded/Hardware Security Researcher to join our team.

If you love working directly on consumer-facing products, we are glad to meet you at our team in Samsung R&D Institute Ukraine.

Embedded systems vulnerability assessment and HW related white/grey/blackbox penetration testing of Samsung mobile products:

• Perform security testing, including pentest of HW and low level firmware device components, security mechanisms
• Conduct risk analysis and security issues mitigation advisory for discovered issues
• Participate in exploitability Proof-of-Concepts development
• Monitor public sources, reproduce externally-reported  HW related vulnerabilities
• Research and monitor emerging threats, including new attack methods and new types of security issues

Requirements:

• Binary reverse-engineering experience
• Knowledge of digital schematics, logic analyzers, HW protocols (I2C, SPI, JTAG, UART), ROM / Bus / Periphery operation
• Understanding of typical software security issues (stack/heap exploitation, code injection, design flaws and oth.)
• Experience with disassemblers
• Proficiency with C/C++, Assemblers (x86/x86_64, ARM)

As a plus:

• Soldering skills, ability to modify the target device
• Embedded firmware reverse-engineering, software exploitation experience
• Experience with HW related attacks (ex. side channel analysis, Fault Injections, power analysis)
• Understanding of Linux Kernel architecture, ARM TrustZone, Secure Boot as a great plus
• Digital schematics and documentation analysis, PCB development skills as a plus
• Participation in security contests, CTFs 

Benefits:

• competitive salary, annual salary review, annual bonuses
• paid 28 work days of annual vacations and sick leaves
• opportunity to become an inventor of international patents with paid bonuses
• medical & life insurance for employees and their children
• paid lunches
• discounts to Samsung products, services
• regular education and self-development on internal courses and seminars
• hybrid work format, working in office is required for some tasks