Android Vulnerability Researcher

Company Overview:

Position Overview:

The Android research group in Cellebrite Security Research Labs (SRL) is where the most challenging problems get solved. We're the ones who find the weaknesses that let us unlock modern phones and turn them into extraction capabilities investigators can actually use in the field. Our work ships straight into Cellebrite's core products, which makes this one of the most important roles in the company.

Our customers are law enforcement agencies working real cases under legal authority: child exploitation, human trafficking, homicide, terrorism. A device we unlock is often THE piece of evidence that moves an investigation forward.

What you'll do

Perform vulnerability research on a huge variety of mobile technologies and architectures, from the application layer down through the kernel, TrustZone, the bootloader, and the firmware running underneath it.

Go first into areas nobody has published and become a world-class expert in them.

Reverse engineer code that was never meant to be read: no source, no symbols, no documentation.

Turn bugs into exploits that hold up in the real world, across a wide range of chipsets, vendors, and OS versions.

Conduct long term widely scoped security research projects as part of a broader team effort

Qualifications

Practical experience performing vulnerability research and exploitation

Practical reverse engineering experience

Practical knowledge of current and upcoming security mitigations

Advantage: knowledge of Android architecture and internals

Advantage: LLM-based pipelines for vulnerability research / exploit development / fuzzing

Advantage: Cryptographic primitives and weaknesses

Advantage: ARM Reversing

Advantage: Advanced fuzzing

Advantage: Offensive hardware research/board design