Android Vulnerability Researcher

CENSUS is looking for an Android Vulnerability Researcher specializing in the discovery, documentation and exploitation of software vulnerabilities, utilizing code auditing, reverse engineering and security testing methodologies.

Projects will target the Android ecosystem, usually userland and kernel, but bootloaders, hypervisors and TEEs are also possible.

This is a hands-on, low-level research role that will require the development of exploit code and advanced chaining and post-exploitation techniques, beyond a simple proof-of-concept.

• Strong problem solving, analytical and presentation skills.
• Strong understanding of computer architecture concepts and assembly language
• with a focus on AArch64 and x86_64.
• Code auditing skills for C, C++, Java/JNI. Python, Rust and Kotlin are
• considered a plus.
• Reverse engineering skills for the above architectures.
• Experience with Android debugging and its idiosyncrasies, preferably both
• userland and kernel.
• Ability to design and develop fuzzing techniques.
• Be confident with the Android ecosystem; building and modifying AOSP,
• updating and rooting devices, developing tools and applications for
• proof-of-concept etc.
• Fluent in English.
• Good communication skills.

• →Work as part of a team.
• →Ability to work independently with minimal supervision.
• →Understand interactions between Android components, map the attack surface
• →and come up with novel attack scenarios and vulnerabilities.
• →Understand existing exploit chains, test, port and maintain their components.
• →Document findings and convey the information to the rest of the team.