Architect – Android Security

Lab Summary:

Samsung KNOX™ (https://www.samsungknox.com/) is Samsung’s guarantee of security, and a secure device gives you the freedom to work and play how, where, and when you want. Samsung Knox consists of a highly secure platform built into a variety of Samsung devices, including Samsung’s mobile phones and laptop computers. Come join the Samsung KNOX team and help us define and develop the future role of security and productivity for Samsung devices and services!

Position Summary:

In this position, the Android security engineer will ideate, design, and architect new security and user privacy features for Samsung’s mobile products. The engineer will keep up-to-date with security features, vulnerability reports, and trends in the mobile phone industry, such as advanced malware and spyware techniques, and design appropriate defenses.

Position Responsibilities:

• Propose novel security and privacy features for Samsung’s smartphones targeted towards end users
• Work with product management teams to refine proposals
• Design and architect security features
• Communicate feature motivations and designs clearly to stakeholders and reach agreement
• Provide expert security guidance to global development teams and ensure security requirements are met through the development process
• Keep up-to-date with latest security features and vulnerability reports on mobile devices from various sources such as social media and blogs
• Research and innovate security through patents where applicable

Required Skills:

• Bachelors, Masters or PhD degree in a related science or equivalent combination of education, training and experience
• 5+ years of related industry experience
• Experience in computer security and/or user privacy as demonstrated by one or more of:
  • Academic publications
  • Academic or industry experience in security
  • Vulnerability disclosures, such as CVEs
  • Tools developed to analyze computer programs
• Understanding of security architecture principles including threat, trust, and security models, access control and cryptography primitives
• A holistic understanding of the Android (or alternate mobile phone) software stack, with deeper technical knowledge in Android framework security, access controls, and internals
• Understanding of latest threats facing smartphones such as advanced malware, ransomware, and spyware
• Knowledge of secure coding and exploit mitigations