Browser Security Engineer

Browser Security Engineer （Entry-level）

Helsinki System Security Laboratory of the Huawei Finland Research Center has been active in the research and development of system security features for Huawei mobile phones, tablets and other consumer devices. Much of our work revolves around mitigating system security risks by hardening OS kernels, driver subsystems and system runtimes with various software and hardware-assisted technologies and providing critical system security services. Many of our earlier projects power the security of Huawei’s HarmonyOS devices today, and we will keep innovating and conducting advanced system security research as Huawei is investing heavily into the new HarmonyOS Next.

We are looking for passionate engineers who had prior experience in securing browsers that includes JavaScript engines, browser runtimes and JIT compiler. The ideal candidate will have prior experience working with the Chrome V8 engine or Safari WebKit or similar browser engines. The role involves identifying and developing solutions to mitigate security vulnerabilities in browsers and thus contributing overall platform security. We offer great opportunities for talented individuals to works within a team of experienced and energetic researchers and engineers and grow with it.

The responsibilities of this work position includes conducting advanced research and development of mobile system and browser security technologies in one or more of the following areas: Analyzing and secure JavaScript engines, JIT compiler and browser runtimes against exploitation, contributing to browser security architecture by working on isolation principles, improve memory protection and privilege separation and hardening of the JavaScript engine, compilers and runtime for HarmonyOS through a combination of software and hardware technologies.

Location: This position is located at our R&D office in Ruoholahti, Helsinki, Finland.

Employment type: Full-time consultant position, work contract arranged via one of Huawei's suppliers.

Requirements

• Masters or PhD in Computer Science, Computer Engineering, or a related field.
• Proficiency in system programming languages such as Assembly/C/C++/Rust.
• Strong knowledge on browser security concepts such as sandboxing, JIT hardening.
• Good experience in system security software design and development.
• Skills to work and interact in English, good teamwork skills.

We consider familiarity with some of below skillsets as an advantage

• Experience with at least one JavaScript engine security (e.g.V8, JSC, SpiderMonkey).
• OS security primitives, AC, randomization, isolation, TEEs.
• Defensive security mechanisms such as control flow integrity, MTE and PAC.
• Embedded operating system internals, such as virtual memory management, security policies.
• Familiarity with ArmV8/9 architectures, such as their virtual memory architectures, security extensions of their instruction set architectures.
• Compilers and compiler internals / principles and how they apply to memory safety.
• Computer security primitives such as isolation, integrity, cryptography, network security.
• Threat modeling and attack surface analysis; familiarity of vulnerability analysis and mitigation techniques, fuzzing and formal proofs, browser attack surfaces and mitigations.

About Huawei

Huawei is a leading global provider of information and communications technology (ICT) infrastructure and smart devices. With integrated solutions across four key domains – telecom networks, IT, smart devices, and cloud services – we are committed to bringing digital to every person, home and organization for a fully connected, intelligent world.

At Huawei, innovation focuses on customer needs. We invest heavily in basic research, concentrating on technological breakthroughs that drive the world forward. We have 207,000 employees, and we operate in more than 170 countries and regions. Founded in 1987, Huawei is a private company fully owned by its employees.

We seek and reward talent! At Huawei Finland Research Center, you will have an outstanding opportunity to be part of the leading research and development of future smart devices. We offer a career in a forward-looking industrial research team with a solid track record in innovation and publication and delivering its result as factual contributions to on-the-market devices.