Android Vulnerability Researcher

As an Android Vulnerability Researcher at Byteria, you'll do deep security research at the lowest layers of Android. You'll reverse engineer system and kernel components, discover vulnerabilities, and write proof-of-concept exploits that hold up against modern devices and their defenses. You'll own research end to end, from mapping attack surface to working PoCs, in a focused, fully remote, research-driven team. This is deep, hands-on, expert-level work across the Android stack, the Linux kernel, drivers, and the TEE.

Career image

Career Details

Location
Spain
Experience Level
Mid-Senior (3+ years)
Team
Security Research
Employment Type
Full-Time
Compensation
Market Competitive

We're Hiring: Android Vulnerability Researcher (Remote)

Byteria is a focused, fully remote team doing deep security research at the lowest layers of Android. Our work is reverse engineering, vulnerability discovery, and writing exploits that hold up against modern devices and their defenses.

You'll own end-to-end Android vulnerability research, from mapping attack surface and reversing system and kernel components, through bug discovery, to writing proof-of-concept exploits that work on current devices and Android versions. This is deep, hands-on, research-driven work for someone already operating at an expert level.

What You'll Do

  • Research attack surface across the Android stack: the Linux kernel, system services, drivers, and the TEE.
  • Reverse engineer native binaries, firmware, and apps using tools like IDA Pro and Ghidra.
  • Discover vulnerabilities through code auditing, fuzzing, and static/dynamic analysis.
  • Develop reliable proof-of-concept exploits and bypass modern Android mitigations (SELinux, verified boot, ASLR, CFI, and more).
  • Build custom tooling to scale your analysis, and document findings for the team.

What We're Looking For

  • Extensive, demonstrable experience (3+ years) in vulnerability research, reverse engineering, and exploit development, with a strong Android / Linux focus.
  • Strong low-level skills: C/C++, ARM/ARM64 assembly, and Python; comfortable reading Java/Kotlin during reverse engineering.
  • Deep knowledge of Android and Linux internals (kernel, Binder, SELinux, the ART runtime) and modern exploit-mitigation bypass techniques.
  • Solid command of memory-corruption bug classes and modern kernel and userland exploitation on Android.
  • A proven track record of turning bugs into working PoCs independently.

Nice to Have

  • Public roots, assigned CVEs, strong CTF results, or conference talks.
  • Baseband, TEE, or bootloader research.
  • Experience building fuzzers and automated VR pipelines.

How to Apply

If you're ready to build resilient systems and defend the future of mobile security, we'd love to hear from you.

Still not convinced?

We're here to help you!