Вакансия Software Penetration Tester

Skills

• C/C++
• ARM
• Linux

Описание вакансии

Responsibilities:

• Vulnerability assessment and penetration testing of various Linux OS security components and mechanisms:
  • vulnerability assessment of Samsung mobile security software: security source code review (white box) and binary analysis (black box)
  • secure SDLC process support (including requirements, design security review)
  • emerging threats research: new attack methods, (un)known security issues risks

Major Requirements:

• hands-on experience with white and black box software penetration testing and vulnerability assessment
• understanding of typical software security issues (memory corruptions, various injections, arithmetic overflows, etc.) and how to protect against them
• good experience with C/C++, scripting languages, assembly (Arm preferred)
• ability to document and describe discovered security issues

Optional Requirements:

• exploitation experience
• understanding of Linux security architecture and design flaws exploitation (privilege escalation, MAC/DAC Passover oth.).
• Rust language knowledge
• tools: experience with fuzzers, disassemblers, debuggers, assessment automation tools
• cryptography: exploitation experience (weak keys, bruteforce, weak crypto, etc.)
• experience with assessing protected solutions (obfuscated / packed code)