Position: Automotive Security Assessment Engineer
Company: Samsung R&D Institute Ukraine
Category: Security
Experience required: 2y
English level: intermediate

Samsung Research and Development Institute Ukraine is looking for a passionate and collaborative Security Assessment Engineer to join our team.

Vulnerability assessment and penetration testing of various low and high-level components and security mechanisms of Samsung devices:

• black/grey/white-box manual penetration testing of SW/HW components
• threat modeling, secure SDLC process support for secure components development
• emerging threats research: new attack methods, common and possible attack vectors, (un)known security issues risks

**Requirements: **

• hands-on experience with White and BlackBox software penetration testing and vulnerability assessment
• understanding of typical software security issues (stack/heap exploitation, code injection, design flaws and other)
• experience in SDL (incl. threat modeling and code review)
• general: C/C++, scripting languages, crypto, essential tools (disassemblers etc.)
• ability to document discovered security issues in English
 
** As a plus: **

• security background (University, relevant prior employment, community activities, CTF)
• proof-of-exploitability development experience
• understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.)
• hardware assessment experience

**We offer:**

• Annual bonus
• Official employment (gig contract)
• Paid 28 days of annual vacations and sick leaves
• Paid days off on Ukrainian official holidays
• Paid maternity leaves
• Opportunity to become an inventor of international patents with paid bonuses
• Medical and life insurance for employees and their children
• Convenient office location 
• Paid lunches
• Regular education and self-development on internal courses and seminars, office library