Jobs of company Samsung R&D Institute Ukraine 5

Job Description:

Samsung R&D Institute Ukraine is looking for a passionate and collaborative WEB Security Assessment engineer to join our team.

You will be involved in preventive security review and penetration testing of our online solutions in use by hundreds of millions of users worldwide.

If you love working directly on consumer-facing products we are glad to meet you at our team of professionals in Samsung R&D Institute Ukraine.

More specifically you will:

- perform vulnerability assessments of Samsung online services

- make blackbox penetration testing of production WEB services and server infrastructure

- make blackbox/greybox security validation of cloud infrastructure

- make blackbox penetration testing of enterprise IT infrastructure

- engage in emerging threats research: new attack methods, threat modelling, security bug hunting

Major Requirements:

- BlackBox and WhiteBox WEB pen.testing and vulnerability assessment experience

- BlackBox pen.test experience of cloud infrastructures and services

- OWASP Top-10: understanding of common Web Application vulnerabilities

- DB: understanding of database operation (pref. PostgreSQL, MongoDB, MySQL, SQLite, MS SQL)

- technical English (strong reporting skills, ability to communicate with colleagues worldwide)

Optional Requirements:

- security background (relevant University education, relevant prior employment, community activities, CTF participation)

- cryptography: understanding of crypto primitives and protocols (SSL/TLS, authentication & authorization protocols, crypto algs.)

- strong understanding of REST, SOAP operation

- pen.test experience of solutions hosted on popular cloud platforms (Alibaba, GCP, Azure, AWS)

- toolset: hands-on experience with Burp, scripting (Python), assessment automation tools (fuzz, scan)

- network security: understanding of WAF, CDN, IPS/IDS operation and weaknesses

- understanding of Devices-to-Cloud Services assessment principles

- understanding of OSINT tools and techniques

Working Conditions:

- official employment - GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

- paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks

Job Description:

White & black-box software vulnerability assessment of Android components:

- security review of Android mobile applications and firmware components

- risk analysis and security issues mitigation advisory

- exploitability Proof-of-Concepts development

- emerging threats research: new attack methods, (un)known security issues risks

Security validation is typically executed in 1-2 months iterations.

Major Requirements:

- in-depth understanding of Android security architecture and typical security issuesin-depth understanding of Android security architecture and typical security issues

- practical experience in reverse-engineering (preferably *.apk and ARM binaries), software exploitation, binary and source code audit

- knowledge of Linux Kernel security architecture and Android-specific add-ons (IPC, SE Android, application security framework)

- ability to understand execution logic in C/C++, Java, Assembler; scripting skills

- good technical English, strong reporting and communication skills

Optional Requirements:

- security background (University, relevant prior employment)

- participation in security contests (CTF), own write-ups publications, community activities

- hands-on experience with assessment automation tools (fuzzers, static source code analyzers)

- experience in reversing ( IDA Pro, JEB) reversing protected solutions (obfuscated/ packed code)

- applied crypto: knowledge of existing algorithms and protocols (AES/RSA/ECC/SHA, authentification/key exchange, digital signature, SSL/TLS)

- software exploitation experience

- awareness of security-related standards and best practices

Working Conditions:

- GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks

Job Description:

Vulnerability assessment and penetration testing of various Linux OS security components and mechanisms:

- vulnerability assessment of Samsung mobile security software: security source code review (white box) and binary analysis (black box)

- secure SDLC process support (including requirements, design security review)

- emerging threats research: new attack methods, (un)known security issues risks

Major Requirements:

- 2+ years of hands-on experience with white and black box software penetration testing and vulnerability assessment

- understanding of typical software security issues (memory corruptions, various injections, arithmetic overflows, etc.) and how to protect against them

- good experience with C/C++, scripting languages, assembly (Arm preferred)

- ability to document and describe discovered security issues

Optional Requirements:

- exploitation experience

- understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.).

- Rust language knowledge

- tools: experience with fuzzers, disassemblers, debuggers, assessment automation tools

- cryptography: exploitation experience (weak keys, bruteforce, weak crypto, etc.)

- experience with assessing protected solutions (obfuscated / packed code)

Working Conditions:

- official employment - GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

- paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks

Samsung R&D Institute Ukraine is looking for an System Verilog verification and Verilog Design Engineer to join our team.

We are looking for an engineer to take part in Verilog-based HW IP Core development and UVM-based verification targeted for Samsung consume electronics in use by hundreds of millions of users worldwide. We promise cutting-edge technologies, decision-making participation, smart team and cookies.

More specifically you will:
 

- Design, develop and test RTL (Verilog, System Verilog) code for HW IP Cores

- Participate in research activities and strategic prototyping for future Samsung products

Qualifications and Skills:
 

- 5 years of hands-on experience with System Verilog (UVM) test bench development experience

- 5 years of hands-on experience with Verilog RTL development experience

- At least hands-on experience with C language

- Understanding principles of object-oriented programming

- At least Bachelor degree in Electronics or related field

Will be a plus:
 

- Pseudo-random, functional coverage verification methodologies, UVM

- SystemVerilog

- FPGA platform development and testing

- Proficiency in a Shell scripting (Python basic level)

- Experience with Linux environments

- Mathematical and algorithmic background

- Good technical English

Working Conditions:

- official employment - GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

- paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks

Samsung R&D Institute Ukraine is looking for an FPGA and Verilog Design Engineer to join our team.

We are looking for an engineer to take part in Verilog-based HW IP Core development and FPGA-based verification targeted for Samsung consume electronics in use by hundreds of millions of users worldwide. We promise cutting-edge technologies, decision-making participation, smart team and cookies.

More specifically you will:
 

- Design, develop and test RTL (Verilog, System Verilog) code for HW IP Cores

- Participate in research activities and strategic prototyping for future Samsung products

Qualifications and Skills:
 

- 5 years of hands-on experience with Xilinx FPGA platform development experience

- 3 years of hands-on experience with (Verilog, System Verilog) development experience

- At least hands-on experience with C language

- At least Bachelor degree in Electronics or related field

Will be a plus:
 

- Knowledge of microprocessor architecture and CPU behavior

- Pseudo-random, functional coverage verification methodologies, UVM

- SystemVerilog and SystemС

- On-chip buses: AMBA(AHB, APB), PLB

- FPGA platform development and testing

- Experience in programming DSP/GPU, SIMD, VLIW, and Vector processors

- Proficiency in a Shell scripting

- Experience with Linux environments

- Mathematical and/or algorithmic background

- Good technical English

Working Conditions:

- official employment - GIG contract

- remote work is possible as well as work in Kyiv office

Benefits:

- competitive salary, annual salary review, annual bonuses

- paid 28 work days of annual vacations and sick leaves

- opportunity to become an inventor of international patents with paid bonuses

- medical & life insurance for employees and their children

- paid lunches

- discounts to Samsung products, services

- regular education and self-development on internal courses and seminars

- hybrid work format, working in office is required for some tasks