Mobile Security Technician – Sun King
Job Purpose
To conduct advanced offensive security assessments, firmware reverse engineering, and hardware exploitation across Sun King mobile devices, payment stacks, and embedded systems—identifying vulnerabilities and collaborating with engineering teams to enhance product resilience.
Roles & Responsibilities
-
Offensive Security Assessments: Conduct comprehensive offensive security evaluations of hardware, firmware, embedded operating systems, and payment stacks on Sun King mobile devices.
-
Reverse Engineering & Analysis: Perform static and dynamic reviews, reverse engineer firmware images, and analyze embedded systems to uncover security weaknesses and architectural flaws.
-
Vulnerability Detection & Exploitation: Detect and exploit vulnerabilities across embedded components, bootloaders, Mobile Device Management (MDM) systems, Android kernels, secure boot mechanisms, and cryptographic modules, developing proof-of-concept attacks.
-
Secure Engineering & Threat Modeling: Collaborate with hardware, software, and product engineering teams to define secure development practices, contribute to threat modeling, and participate in architecture reviews for new features.
-
Research & Threat Intelligence: Stay up to date with emerging vulnerabilities, tools, and offensive security research relevant to smartphone financing and IoT ecosystems.
Qualifications
-
Not explicitly specified in the provided source material (typically requires a degree in Computer Science, Cybersecurity, Electrical Engineering, or equivalent practical experience).
Skills, Experience & Competences
-
Solid expertise in Android security, MDM systems, IoT device architectures, and hardware security testing.
-
Strong familiarity with hardware exploitation techniques, including JTAG/SWD/UART debugging, side-channel analysis, and fault injection, along with hands-on experience using tools such as Flash 64, Pandora, Easy JTag, Chimera, and CM2.
-
Proficiency in reverse engineering software (Ghidra, IDA Pro, Binary Ninja) and debugging hardware tools (JTAGulator, OpenOCD, Bus Pirate, binwalk, QEMU).
-
Deep understanding of embedded security technologies, including secure boot, Trusted Platform Modules (TPM), Trusted Execution Environments (TEE), and flash encryption.
-
Strong programming and scripting skills in Python, C/C++, or Bash, with a solid grasp of vulnerability classes (e.g., memory corruption, insecure update mechanisms) and fintech device security.