A searchable index of Hacker News “Who is hiring?” job postings.
← All postings · August 2018 thread
Gemalto Pte Ltd
Mobile Security Researcher
Original posting
Gemalto Pte Ltd | Singapore | Mobile Security Researcher/Pentester | Singapore Full-time | ONSITE| Visa/Relocation
Position: Mobile Security Researcher/Pentester (Android and iOS)
Job Description:
Gemalto provides mobile platform solutions to various industries, including governments and banks, across the globe. This role is very specific to mobile platforms- Android & iOS. The core responsibilities are:
- Perform pentesting on mobile products
- source code reviews
- Risk Assessment
- Researching on new attack and defense techniques for mobile applications.
- Act as consultant to internal teams and provide advise for best security practices, applied crypto, authentication, secure programming etc.
- Reverse Engineering mobile application (native, Java, ObjC).
Desired Skillset:
- Understanding of the attack paths on mobile applications
- Understanding about common OS exploits: Jailbreaking/Rooting/Flashing a device, custom kernels, custom ROMs, hooking frameworks
- Comfortable with ARM/Aarch64 assembly .
- Knowledge of classic attacking techniques: data cloning, reverse engineering, traffic interception, hooking, debugging (like gdb, jdb, other tools like Burp suite, Substrate, Frida, Cycript, IDA etc.)
- Knowledge of iOS/Android security frameworks – their implementation and mitigation controls
- Knowledge about applied cryptography and best practices.
- Experience with reversing obfuscated code (C, Java, ObjC) using tools/techniques like symoblic execution, unicorn etc, is a plus.
It is a small well managed team, with challenging work and mostly involves working independently. Training and attending conferences opportunity is provided.
If you are interested to learn more about the role, feel free to contact me at vikas.gupta@gemalto.com.
On Linkedin: https://www.linkedin.com/jobs/view/729732099/