HAL & IPC Integration: Define, implement, and evolve AIDL-based HALs and Binder IPC interfaces connecting the Android OS framework with underlying TEE and Secure Element hardware.
Cryptography & PKI: Implement and review cryptographic protocols, hardware-backed key generation, key attestation, X.509 certificate chain validation, and secure storage mechanisms.
Testing & Compliance: Author, maintain, and debug CTS (Compatibility Test Suite) and VTS (Vendor Test Suite) tests to ensure ecosystem-wide security compliance and robustness across SoC vendors and OEMs.
Cross-Stack Debugging: Triage, root-cause, and resolve complex functional, performance, and security issues spanning Java framework services, native C++/Rust system daemons, kernel drivers, TEEs, and Secure Elements.
Technical Leadership: Provide technical mentorship, drive security design reviews, Threat Modeling, and code reviews in C++, Rust, and Java, ensuring adherence to memory safety and secure coding best practices.
Minimum Qualifications
Education: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.
Experience: 7+ years of hands-on software engineering experience in embedded systems, OS internals, or mobile platform security.
Programming Languages: Strong proficiency in C++, Rust, and Java (including JavaCard for Secure Element applet development where applicable).
Android Security Core: Deep hands-on experience with Android Keystore, KeyMint (or Keymaster), Trusty OS (or equivalent TEEs like OP-TEE/QTEE), and Secure Elements (eSE / StrongBox).
Interfaces: Proven experience developing and integrating Android HALs using AIDL (and HIDL) and Binder IPC.
Cryptography: Solid foundation in applied cryptography (AES, RSA, ECC/ECDSA/ECDH, SHA/HMAC, KDFs), PKI, X.509 certificates, and hardware key attestation.
Validation: Hands-on experience developing, executing, and debugging Android CTS and VTS test suites.
Preferred Qualifications
Experience with Rust in AOSP (e.g., keystore2, KeyMint Rust reference implementation, or Trusty Rust TAs).
Experience with JavaCard applet development, GlobalPlatform specifications, APDU command protocols, and OMAPI.
Knowledge of Remote Key Provisioning (RKP), CBOR/COSE data structures, DICE (Device Identifier Composition Engine), or Android Virtualization Framework (AVF / pKVM).
Familiarity with side-channel mitigation, fuzz testing (libFuzzer), static/dynamic analysis tools, and hardware security certification standards.
Track record of contributing to the Android Open Source Project (AOSP) and collaborating with SoC vendors, OEMs, or Secure Element vendors.
We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.
We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.
