Senior Android Security Researcher

Senior Android Security Researcher at Operation Zero. Remote, salary from 1 million RUB. Research Android kernel, reverse engineering, and exploit development.

Responsibilities: • Perform tasks set for the team, including Android kernel research, reverse engineering of closed-source components, debugging smartphones, checking existing vulnerabilities and proof-of-concepts for exploitability, writing working exploits, chaining exploits. • Participate in testing ready exploits, modify and update them when new software versions are released. • Suggest your ideas to the team and participate in discussions on new developments and research.

• Ability to quickly learn, analyze large volumes of disparate information and synthesize them into concrete knowledge, systems thinking. • Ability to work and make decisions with limited information, no fear of hypothesizing, testing them, abandoning non-working ideas. • Ability to focus on tasks that require large amounts of time up to several months, maintain productivity and not give up when the task seems impossible. • Proven experience writing exploits or finding critical vulnerabilities (remote code execution, privilege escalation, sandbox escape, bypassing protective mechanisms, RCE, LPE, SBX, mitigation bypasses) in Android in the last year. • Understanding Android and Linux kernel architecture and internals. • Knowledge of current vulnerability classes and protective mechanisms (mitigations). • Proficiency in technical tools such as C/C++, ARM assembly, Java, Android debugger, Ghidra, IDA Pro, etc. • Ability to configure and use LLM for automating research tasks and generating proof-of-concepts, semi-working and working exploits. • Ability to find vulnerabilities in software and knowledge of Kotlin and JavaScript will be an advantage. • English at technical documentation reading level. • Professional experience and formal education do not matter.

Remote work. Salary: from 1 million RUB.