Senior System Security Test Engineer

Senior System Security Test Engineer

Helsinki System Security Laboratory of the Huawei Finland Research Center has been active in the research and development of system security features for Huawei mobile phones, tablets and other consumer devices. Much of our work revolves around mitigating system security risks by hardening OS kernels, driver subsystems and system runtimes with various software and hardware-assisted technologies and providing critical system security services. Many of our earlier projects power the security of Huawei’s HarmonyOS devices today, and we will keep innovating and conducting advanced system security research as Huawei is investing heavily into the new HarmonyOS Next.

We are looking for a passionate Mobile Operating System Security Test Engineer with solid industry experience in the field to join us in the mission to build ground breaking mobile system security technologies for the next generation of HarmonyOS. The work entails leading the software testing efforts in the lab, i.e. conducting fuzzing tests and/or penetration tests against existing software components and/or newly prototyped software components in the following areas: Operating system kernel, near-field communication protocols and software stack, critical system services and javaScript engines, compilers and runtimes. Testing is done both in while- and blackbox manner, and the candidate will be involved in defining and setting up re-usable testing strategies.

Location: This position is located at our R&D office in Ruoholahti, Helsinki, Finland.

Employment type: Full-time consultant position, work contract arranged via one of Huawei's suppliers.

Requirements

• Masters or PhD in Computer Science, Computer Engineering, or a related field.
• At least 7 years of experience in fuzzing for embedded software (Mobile devices & IoT devices). Similar penetration testing skills and experience could also be entertained.
• Proficiency in English technical writing and presentation.
• Proficiency in one or more system programming languages such as Assembly/C/C++/Rust.
• Open mindset with strong teamwork spirit and collaboration skills.
  
  

We consider familiarity with some of below skillsets as an advantage

• Embedded operating system internals, such as virtual memory management, events and scheduling,
• Threat modeling and attack surface analysis; familiarity of vulnerability analysis and mitigation techniques.
• Finding and exploiting vulnerabilities in embedded systems.
• ArmV8/9 architectures, such as their virtual memory architectures, security extensions of their instruction set architectures.
• Compilers and compiler internals / principles and how they apply to memory safety.
• Good knowledge in JavaScript engines, runtime and JIT compilers.
• Computer security primitives such as isolation, cryptography, access control.

About Huawei

Huawei is a leading global provider of information and communications technology (ICT) infrastructure and smart devices. With integrated solutions across four key domains – telecom networks, IT, smart devices, and cloud services – we are committed to bringing digital to every person, home and organization for a fully connected, intelligent world.

At Huawei, innovation focuses on customer needs. We invest heavily in basic research, concentrating on technological breakthroughs that drive the world forward. We have 207,000 employees, and we operate in more than 170 countries and regions. Founded in 1987, Huawei is a private company fully owned by its employees.

We seek and reward talent! At Huawei Finland Research Center, you will have an outstanding opportunity to be part of the leading research and development of future smart devices. We offer a career in a forward-looking industrial research team with a solid track record in innovation and publication and delivering its result as factual contributions to on-the-market devices.