This is a fully remote position, open to applicants in Greece.

📋 Description

• Identify, document, and leverage software vulnerabilities.

• Employ code auditing, reverse engineering, and security testing techniques.

• Perform in-depth research focusing on the Android ecosystem, encompassing userland and kernel, with potential tasks related to bootloaders, hypervisors, and TEEs.

• Create exploit code and advanced chaining and post-exploitation strategies that extend beyond basic proof-of-concepts.

• Grasp the interactions among Android components and delineate the attack surface.

• Innovate attack scenarios and pinpoint vulnerabilities.

• Analyze existing exploit chains, testing, porting, and maintaining their elements.

• Document discoveries and share insights with the team.

• Collaborate effectively within a team and work autonomously with minimal oversight.

⛳️ Requirements

• Excellent problem-solving, analytical, and presentation abilities.

• In-depth knowledge of computer architecture concepts and assembly language, particularly AArch64 and x86_64.

• Proficient in code auditing for C, C++, and Java/JNI.

• Skilled in reverse engineering for AArch64 and x86_64.

• Familiarity with Android debugging and its nuances, ideally in both userland and kernel.

• Capability to design and implement fuzzing techniques.

• Proficient in the Android ecosystem, including building and modifying AOSP, rooting devices, and creating tools and applications for proof-of-concept.

• Fluent in English.

• Strong communication skills.

• Knowledge of Python, Rust, and Kotlin is a plus.