Software Penetration Tester

Samsung is an amazing place to work with great people in an outstanding environment.

With us, you will have an opportunity to be a part of innovation that makes a real difference in the lives of millions of people worldwide.

Samsung R&D Institute Ukraine (SRK) has been working in Kyiv since 2009.

We develop innovative solutions in Security, Artificial Intelligence, Augmented and Virtual Reality for the next generations of consumer electronics.

SRK contributes to the development of a strong local hi-tech research community by cooperating with the Universities as well as by providing various educational opportunities for the students.

Currently, we’re looking for a Software Penetration Tester

Job Description

Vulnerability assessment and penetration testing of various Linux OS security components and mechanisms:

  • Vulnerability assessment of Samsung mobile security software: security source code review (white box) and binary analysis (black box)
  • Secure SDLC process support (including requirements, design security review)
  • Emerging threats research: new attack methods, (un)known security issues risks

Major Requirements

  • 2+ years of hands-on experience with white and black box software penetration testing and vulnerability assessment
  • understanding of typical software security issues (memory corruptions, various injections, arithmetic overflows, etc.) and how to protect against them
  • good experience with C/C++, scripting languages, assembly (Arm preferred)
  • ability to document and describe discovered security issues

Optional Requirements

  • exploitation experience
  • understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.).
  • Rust language knowledge
  • tools: experience with fuzzers, disassemblers, debuggers, assessment automation tools
  • cryptography: exploitation experience (weak keys, bruteforce, weak crypto, etc.)
  • experience with assessing protected solutions (obfuscated/packed code)

 

We offer:

  • Competitive salary, annual salary review, annual bonuses
  • Employment by gig-contract
  • Paid 28 days of annual vacations and sick leaves
  • Paid days off on Ukrainian official holidays
  • Paid maternity leaves
  • Opportunity to become an inventor of international patents with paid bonuses
  • Medical & life insurance for employees and their children
  • Convenient office location
  • Paid lunches
  • English language courses
  • Regular education and self-development on internal courses and seminars, office library

 

You can apply here