Internship – Vulnerability Research Intern

About the Position

Internship – Vulnerability Research Intern

Samsung R&D Institute Poland is looking for a Vulnerability Research Intern to join our Security Team. The main responsibilities of this role are finding new and analyzing existing vulnerabilities in Samsung Android-based products (Linux kernel and native user space), planning and conducting security analysis, performing security research, developing infrastructure and tools to automate vulnerability detection.

Responsibilities

• Conducting security assessment of the newest Samsung flagship devices (Galaxy S and Galaxy Note devices).
• Performing security research focused on finding vulnerabilities in Samsung products.
• Finding bugs in software applications, system services, drivers, and kernel to identify potential vulnerabilities.
• Constant review of existing processes and tools, gradual improvement of assessment methodology.
• Automatic and manual security testing, analyzing, and triaging using both source code analysis and dynamic analysis tools.
• Building, maintaining, and extending the distributed fuzzing framework for the discovery and triage of vulnerabilities.

Requirements

• Comprehensive, practical programming knowledge in C or C++ language (good to have Java or Python, the more you know about how programs work together with operating systems, network, etc. the better).
• Ability to 'think outside of the box' and a passion for solving unique challenges in technical environments.
• Knowledge about different types of fuzzing techniques and related tools.
• Practical knowledge of the code review for finding vulnerabilities.
• Knowledge about application security, reverse-engineering, and binary analysis (GDB, IDA Pro).

Nice to Have

• Ability to leverage scripting languages like Bash or Python for implementation of automatable tasks.
• Deep understanding of Linux/Android Operating System and its low-level components (like drivers).
• Knowledge of Kernel interworking with drivers, services, and higher-level platform components.
• Knowledge of static and dynamic analysis tools and its usage in the context of security evaluation.
• Knowledge of clang compiler internals, ability to write compiler extensions to improve security analysis.

We Offer

• Competitive salary

• Flexible working hours

• Possibility of long-lasting cooperation

• Possibility to learn from world-class experts in a friendly atmosphere

• Integration budget

• PC workstation/Laptop

• Variety of discounts (Samsung products, theaters, restaurants)

• Free access to Copernicus Science Center for you and your friends

• Chillout rooms

• Variety of tea, coffee, and fresh fruits/vegetables

• Office in Warsaw Spire near metro station

About the Company

Samsung R&D Institute Poland

If you share our faith in the power of technology that changes reality, you work with passion, you have a curiosity about the world, and you still want to learn - this is the place for you, and we know what types of working conditions to create to foster your development. We are looking for people who can turn bold visions of the future into projects and products that will serve millions of people around the world.

Technologies we use

Expected

• C
• C++

Optional

• Java
• Python
• Bash

Location: plac Europejski 1, Wola, Warszawa

Type: Hybrid work

Specializations: Security