About the project

• Samsung Electronics is one of the world's largest information technology company headquartered in Suwon, South Korea. It has assembly plants and sales networks in 80 countries and employs around 370,000 people. It is the world's largest manufacturer of mobile phones and smartphones fueled by the popularity of its Samsung Galaxy line of devices.
• Due to a dynamic growth of the Mobile Security Team, Samsung R&D Poland is looking for a Security Engineers/ Vulnerability Researchers (we have opened positions from Junior to Senior). The main responsibilities of this role are finding new and analyzing existing vulnerabilities in selected components of Samsung Knox solution, across all software layers (Linux kernel, native Android user space and Android applications layer) as well as research and analysis of existing tools and techniques used in attacks against Samsung Knox.

Your responsibilities

• Conducting security assessment of selected parts of Samsung Knox solution in Samsung mobile devices
• Performing security research focused on finding vulnerabilities in Samsung Knox components
• Researching and analyzing existing security issues, attack strategies and techniques targeting Samsung Knox
• Analyzing Android/Windows applications used in attacks on Samsung Knox
• Participating in all phases of product security analysis – from research and planning to execution
• Automated security testing, manual analyzing, and triaging service using both source code analysis and dynamic analysis tools

Our requirements

• Experience in security analysis across all Android system layers (nice to have: reported CVE/SVEs, write-ups, conference talks, bug bounty acknowledgements etc.)
• Comprehensive, practical programming knowledge in C or C++ and Java languages (good to have Python) – the more you know about how programs work together with operating systems, network, etc. the better
• Ability to 'think outside of the box' and a passion for solving unique challenges in technical environments
• Practical knowledge of Android system architecture
• Practical knowledge of the code review for finding vulnerabilities
• Advanced knowledge about application security
• Knowledge about different types of fuzzing techniques and related tools
• Knowledge about reverse-engineering and binary analysis of Android/Linux and Windows applications

Technologies we use

What we offer

• Friendly working atmosphere

• Wide range of trainings and a huge support in developing algorithmic skills

• Opportunity to work in multiple projects

• Working with the latest technologies on the market

• Monthly integration budget

• Possibility to attend local and foreign conferences

• Start of work between 7 a.m. and 10 a.m.

• PC workstation/Laptop + 2 external monitors

• Private medical care (possibility to add family members for free)

• Multisport card

• Life insurance

• Lunch card

• A partial reimbursement of the cost of an English language course

• Possibility to learn Korean for free

• Variety of discounts (Samsung products, theaters, restaurants)

• Unlimited free access to Copernicus Science Center for you and your friends

• Possibility to test new Samsung products

• Office in Warsaw Spire near metro station

• Hybrid model of work – 3 days from the office per week

• Attractive relocation package