Android Systems Security Engineer

Lab Summary:

Samsung Knox™ (https://www.samsungknox.com/) is Samsung’s guarantee of security, and a secure device gives you the freedom to work and play how, where, and when you want. Samsung Knox consists of a highly secure platform built into a variety of Samsung devices, including Samsung’s mobile phones and laptop computers. Come join the Samsung Knox team and help us define and develop the future role of security for Samsung devices and services!

Position Summary:

In this position, the Android Systems Security Engineer will design, rapidly prototype, and implement platform security features for Samsung's mobile products. The engineer will apply deep systems expertise across ARM/ARM64 architectures, Android system software, hypervisors, TrustZone and trusted execution environments, Linux kernel, and firmware to identify security risks and design robust defenses while balancing performance tradeoffs.

Position Responsibilities:

• Build novel systems security features for Samsung's smartphones, with emphasis on ARM/ARM64, hypervisor, TrustZone, Linux kernel, and firmware components
• Work with product management and global development teams to refine security proposals, threat models, and product requirements
• Design, rapidly prototype, and implement security features and evaluate performance tradeoffs
• Communicate feature motivations, security designs, and risk tradeoffs clearly to stakeholders and reach agreement
• Use secure coding practices with concepts such as least privilege access control, isolation boundaries, and cryptography as appropriate to implement security features and ensure that security requirements are met by the implementation
• Use low-level debugging and analysis tools, including JTAG, hardware debuggers, trace tools, and emulation, to diagnose complex security and reliability issues
• Keep up-to-date with the latest security features, vulnerability reports, exploit techniques, and emerging threats affecting Android and mobile devices
• Research and innovate systems security through patents and publications, and leverage automation and AI to streamline security workflows and research

Required Skills:

• Bachelor's degree in Computer Science, Cybersecurity or a related field, or 3+ years with a Master's degree; or a PhD; or equivalent combination of education, training and experience
• 5+ years of related experience in a professional role
• Experience in computer security as demonstrated by one or more of:
  • Academic publications in systems and/or security
  • Industry experience with systems development
• A holistic understanding of the Android (or alternate mobile phone) software stack, with deeper technical knowledge of ARM/ARM64, Linux kernel, hypervisor, TrustZone, and firmware
• Knowledge of cryptography, secure coding, and exploit mitigations
• Understanding of and experience with applying AI to security workflows and research