Research Engineer, Android Security

Lab Summary:

Samsung KNOX™ (https://www.samsungknox.com/) is Samsung’s guarantee of security, and a secure device gives you the freedom to work and play how, where, and when you want. Samsung Knox consists of a highly secure platform built into a variety of Samsung devices, including Samsung’s mobile phones and laptop computers. Come join the Samsung Knox team and help us define and develop the future role of security for Samsung devices and services!

Position Summary:

In this position, the Android security engineer will research, ideate, design, and architect new security features and security analysis tools for Samsung’s mobile products. The engineer will keep up-to-date with security features, analysis, vulnerability reports, and trends in the mobile phone industry, and design appropriate defenses. 

Position Responsibilities:

• Propose novel security features and vulnerability analysis tooling for Samsung’s smartphones
• Work with product management teams to refine proposals
• Design and architect security features
• Communicate feature motivations and designs clearly to stakeholders and reach agreement
• Provide expert security guidance to global development teams and ensure security requirements are met through the development process
• Perform security review of code and ensure secure coding practices
• Keep up-to-date with latest security features and vulnerability reports on mobile devices from various sources such as social media and blogs
• Understand and leverage AI to streamline work
• Research and innovate security through patents and publications

Required Skills:

• Bachelor's degree; or 3+ years with a Master's degree; or a PhD; or equivalent combination of education, training and experience
• 5+ years of related experience 
• Experience in computer security as demonstrated by one or more of:
  • Academic publications
  • Academic or industry experience in security
  • Vulnerability disclosures, such as CVEs
  • Tools developed to analyze computer programs
• A holistic understanding of the Android (or alternate mobile phone) software stack, with deeper technical knowledge in Android framework security, access controls, and internals
• Understanding of latest threats facing smartphones such as advanced malware, ransomware, and spyware
• Knowledge of cryptography, secure coding, and exploit mitigations
• Understanding of and experience with applying AI to security workflows and research