Android Vulnerability Researcher

Role overview Lead hands-on security research into vulnerabilities across the Android platform, from system components and drivers to the Linux kernel and trusted execution environments. The work spans attack-surface analysis, reverse engineering, vulnerability discovery, and development of proof-of-concept exploits that function on current devices and defenses.

Responsibilities - Map and investigate attack surfaces across Android system services, kernel components, drivers, and trusted execution environments. - Reverse engineer native binaries, firmware, and applications using tools such as IDA Pro or Ghidra. - Audit code and investigate suspected security weaknesses across the platform. - Develop and validate proof-of-concept exploits against modern devices and Android versions. - Conduct research independently from initial investigation through a working demonstration.

Requirements - At least three years of relevant experience, with expertise in Android and Linux internals. - Strong understanding of areas such as the kernel, Binder, SELinux, and the ART runtime. - Practical knowledge of memory-corruption vulnerabilities and Android kernel or user-space exploitation. - Familiarity with modern exploit mitigations and techniques for bypassing them. - Demonstrated ability to independently turn vulnerability findings into functional proof-of-concept exploits.

Nice to have - Public vulnerability research, CVE assignments, strong CTF results, or conference presentations. - Research experience involving baseband systems, trusted execution environments, or bootloaders. - Experience building fuzzers or automated vulnerability research workflows.

Benefits and work setup - Full-time position on a remote security research team. - The role is listed in Spain; compensation is described as market competitive.