Position: Software Penetration Tester
Company: Samsung R&D Institute Ukraine
Category: Security
Experience required: 2y
English level: intermediate
Published: 2023-07-01T00:00:00+03:00

**Job Description:**

Vulnerability assessment and penetration testing of various Linux OS security components and mechanisms:

- vulnerability assessment of Samsung mobile security software: security source code review (white box) and binary analysis (black box)
- secure SDLC process support (including requirements, design security review)
- emerging threats research: new attack methods, (un)known security issues risks

**Major Requirements:**

- 2+ years of hands-on experience with white and black box software penetration testing and vulnerability assessment
- understanding of typical software security issues (memory corruptions, various injections, arithmetic overflows, etc.) and how to protect against them
- good experience with C/C++, scripting languages, assembly (Arm preferred)
- ability to document and describe discovered security issues

**Optional Requirements:**

- exploitation experience
- understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.).
- Rust language knowledge
- tools: experience with fuzzers, disassemblers, debuggers, assessment automation tools
- cryptography: exploitation experience (weak keys, bruteforce, weak crypto, etc.)
- experience with assessing protected solutions (obfuscated / packed code)

**We offer:**

- Annual bonus
- Official employment (gig contract)
- Paid 28 days of annual vacations and sick leaves
- Paid days off on Ukrainian official holidays
- Paid maternity leaves
- Opportunity to become an inventor of international patents with paid bonuses
- Medical and life insurance for employees and their children
- Convenient office location
- Paid lunches
- Regular education and self-development on internal courses and seminars, office library