Senior Staff Engineer, Penetration Tester

Lab Summary: 

Our mission is to find vulnerabilities and formulate exploitation for modern mobile and IoT devices. The team consists of pen testers and well-known researchers in the field.

 Position Summary:

We are looking for a Principal Penetration tester who will play a vital role in our high-performance Advanced Threat Intelligence team, finding vulnerabilities and formulating exploitation for modern mobile and IoT devices. In this role, you will work on the latest exploitation techniques, new classes of vulnerabilities, as well as automatic analysis techniques like fuzzing and symbolic execution.

Position Responsibilities

• Finding new security vulnerabilities in Samsung mobiles, Android, and the Linux kernel
• Developing exploitation to prove the existence of vulnerabilities
• Developing corresponding patches to prevent them from exploitation
• Writing documents for the new discovery, security guidelines, and playbooks internally/externally
• Building new analysis tools to automate the bug finding
• Participating in CTF, pwn2own, bug bounties

 Required Skills:

• BS/MS/Ph.D. degree in Computer Science or related technical field or equivalent practical experience
• 8+ years of either pen-testing experiences and/or vulnerability research
• Experiences in CTF competitions, Pwn2own, or bug bounties
• 0-day vulnerabilities (CVEs) reported in low-level system software: AOSP, macOS, Windows, FreeBSD, Linux, Chrome, Safari, etc.
• Experiences in developing new tools: LLVM, CodeQL, fuzzer, symbolic/concolic executor, sanitizers, static code analysis, crash analysis
• Publication, technical report, blog articles on 0-day bugs, exploitation techniques, or research