Android Security Researcher
公司概述：Cellebrites (Nasdaq:CLBT) 的使命是通过增强数字调查和情报收集，使其全球客户能够保护和拯救生命，以加速世界各地社区的司法.Cellebrate 的人工智能驱动的数字调查平台允许客户在合法批准的调查中合法访问，收集，分析和共享数字证据，同时保持数据隐私。数千家公共安全组织，情报机构和企业依赖 Cellebride 的数字法医和调查解决方案可通过云，本地和混合部署来更快速关闭案件并维护社区。作为一个有才华的研究员，你将加入行业领先的数字智能安全研究实验室。在这个职位上，你将参与并领导新项目在未被探索的漏洞研究领域，产生世界独特的能力从手机和其他嵌入式设备中提取证据。最近的手机 （从烧焦手机到最新旗舰）从法医角度来看，越来越具有挑战性，涉及硬件支持加密 (FDE/FBE),安全引导链 （验证启动/dm-verity）,不断发展的 SELinux 政策以及在 ARM TrustZone 安全世界中冒险。关键责任：你将加入 Cellebrite 的数字智能安全研究实验室组并成为一支专业于解决现代数字智能挑战的热情研究人员团队的一部分。我们的世界级研究结果通过允许合法提取证据和每天把罪犯置身后监狱帮助执法部门。如果你是一个安全研究人员，对自己的工作的道德使用情况有关心，如果在一个分散的差异性生态系统中工程和制作平台范围内的本土有效载荷的艺术是你欣赏到的挑战，那么你属于我们。我们需要你的帮助来让世界变得更安全的地方。资格：· 执行漏洞研究和利用的实践经验，最好是在移动或其他现代环境中进行攻击，例如 Windows/Linux/iOS/MacOS · 实际逆向工程经验，最好是在 ARM / TrustZone / Hypervisors · 优势：加密原始和弱点 · 优点：高级 fuzz
查看英文原文
Description
Company Overview:
Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, and find us on social media @Cellebrite.
Position Overview:
As a talented researcher, you will be joining the industry’s leading digital intelligence Security Research Labs group. In this position you will be taking part and leading new projects in little-explored vulnerability research territories, producing world-unique capabilities to extract evidence from phones and other embedded devices. Recent phones (from burner phones to the latest flagships) are increasingly challenging from a forensics perspective, and involve hardware-backed encryption (FDE/FBE), secure boot chains (Verified Boot/dm-verity), evolving hardened SELinux policies, as well as adventures in ARM TrustZone secure worlds.
Key Responsibilities:
You will join Cellebrite’s digital intelligence Security Research Labs Group and be a part of a team of passionate researchers, dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. Our world-class research results assist law enforcement by enabling lawful evidence extraction, and putting criminals behind bars, every day.
You are a security researcher who cares about the ethical use case for his/her work, and if the art of engineering and crafting a platform-wide native payload in a fragmented ecosystem of gaping variance is the kind of challenge you appreciate, you belong with us. We need your help to make the world a safer place.
Qualifications:
- Practical experience performing vulnerability research and exploitation, preferably in mobile or other modern environments, eg. Windows/Linux/iOS/MacOS
- Practical reverse engineering experience, preferably in ARM / TrustZone / Hypervisors
- Advantage: Cryptographic primitives and weaknesses
- Advantage: Advanced fuzzing
- Advantage: Offensive hardware research/board design
- Advantage: Experience dealing with modern memory corruption mitigations, such as PAC and MTE.
Originally posted on Himalayas