Helaas, deze vacature is niet actief.

Forensic exploit developer / reverse engineer for mobile devices in waren

Forensic exploit developer / reverse engineer for mobile... Ministry of Security and Justice, Netherlands Forensic......

Beschrijving

Forensic exploit developer / reverse engineer for mobile devices

Ministry of Security and Justice, Netherlands Forensic Institute

Functieomschrijving

The Digital and Biometric Traces division of the Netherlands Forensic Institute is primarily engaged in forensic research into automated systems. The division reviews many types of soft- and hardware, and the results play an important role in detection, prosecution and legal cases. You are a qualified hacker or reverse engineer with a lot of practical experience on mobile devices, looking to apply your skills to benefit the public good.

We are a group of embedded systems specialists within the Digital and Biometric Traces Division (DBS), which develops and performs methods for extracting digital data from lawfully seized electronic devices like mobile phones, navigation systems and other smart devices. By mainly focusing on physical flash chip acquisition techniques, the team is quite successful and has earned a good reputation within the digital forensic community.

The increased use of strong cryptography in consumer devices demands for new approaches to keep our services up to standard. We need you to expand our device exploitation capabilities. You have a hacking for justice affinity, a creative mind and love to challenge colleagues to assist your exploit work with expertise and tools present at the  Netherlands Forensic Institute (e.g. mathematics, electronics, logical analysers, micro probes, focused ion beam).

You will be working on developing exploits for mobile devices that were seized in a criminal investigation. These devices are password protected, or have user data that is encrypted with unknown keys. Your job is to develop methods to find a valid password or a way to decrypt extracted data. Another task is to analyse security features of apps present on seized mobile devices and develop a method to recover information from those apps.

The information from seized devices can be used in court as evidence to prove or disprove guilt. This demands that all processes applied to digital evidence need to be logged in such a way that an independent party is able to examine those processes and achieve the same result. Therefore, you have an eye for the forensic soundness of the methods you develop. The need for auditing exploits on mobile devices within a forensic context will become even more relevant as soon as a proposed Dutch law is accepted where the police is allowed to use exploits on devices of (certain) suspects before they are seized.

Functie-eisen
  • You have a Master’s degree in preferably computer science, or equivalent working experience.
  • You have extensive knowledge of low level layers of embedded software. Not only on the application (Java, C) and OS (iOS, Android) level, but specifically on the layers connecting software with hardware components.
  • You have experience with ARM based architectures, low-level debugging, reverse engineering techniques (IDA, GDB, ICE, JTAG). You know how to write low level exploit code, also with ROP and within ASLR contexts.
  • You’ve also worked with Trusted Execution Environments like QSEE.  
  • You have good practical knowledge of mobile device security and cryptography.
  • You can read ARM based assembly and know how to determine key app security features with tools like IDA or Radare2.
  • You incorporate information you find into applications aimed at breaking app security which run on dedicated infrastructures. You have excellent programming skills (e.g. C/C++ or OpenCL) and experience with software optimisation.
  • You are fluent in English or Dutch, or willing to learn Dutch.
  • You have a curious mind, are a quick learner and able to continuously renew and extend your knowledge.
  • You work methodically and structured, your results are reproducible and can be validated.

Een veiligheidsonderzoek op niveau B maakt onderdeel uit van de aanstellingsprocedure.
Kijk voor informatie over het (niveau van het) veiligheidsonderzoek op de site van de AIVD. ()

Arbeidsvoorwaarden
Arbeidsvoorwaarden van de vacature
Salarisniveau schaal 11, schaal 12, schaal 13
Salaris Min €2996 - Max €5837 bruto per maand
Dienstverband Vaste aanstelling (eventueel met een proeftijd)
Maximaal aantal uren per week 36
Overige arbeidsvoorwaarden

In addition to the salary and holiday pay, you can expect to receive an end-of-year payment, the so-called ‘13th month’. The national government strongly adheres to personal growth and career development and offers several opportunities to facilitate this. The terms of employment include, amongst other things, a maximum of 55% paid parental leave (conditions apply), facilities to study, an additional leave plan for older employees and reimbursement of commuting costs. Moreover, the national government also offers a range of options to shape your total employment package based on individual choice.

Bijzonderheden
  • We are able to offer a secondment agreement to suitable candidates employed by the (national) government.
  • The position will be simultaneously offered both in- and externally.
  • It is also possible to apply as a group simultaneously to several of our vacancies.
  • Send your motivation letter and CV via e-mail to J.Koek@nfi.minvenj.nl, addressed to Marjolijn Brouwer, team manager Digital Technology.
  • Tell us something about yourself in your motivation letter (e.g. hobbies or personal interests).
  • A Certificate of Good Conduct and a security screening B, are part of the application procedure.
  • Acquisition related to this vacancy will not be appreciated.
  • For any additional information regarding this position and the application process, please contact Jan Peter van Zandwijk (070 - 888 6435) or Ronald van der Knijff (070 - 888 6403).

Wil jij weten waar je eventueel komt te werken? .

De organisatie - Ministry of Security and Justice, Netherlands Forensic Institute

The Ministry of Security and Justice is responsible for maintaining the rule of law in the Netherlands, so that people can live together in freedom, regardless of their life-style or views. The Ministry is working towards a safer, more just society by giving people legal protection and, where necessary, intervening in their lives. We sometimes have to take radical measures: divesting parents of parental responsibility, for example, or putting convicted criminals in prison. We also give people new prospects: for example, we help prisoners return to society and provide support for victims of crime.

Netherlands Forensic Institute
The Netherlands Forensic Institute (NFI) is an agency of the Ministry of Security and Justice and delivers high-quality forensic services with the help of state-of-the-art technology and science. Driven NFI professionals focus their combined attention on the punctual delivery of understandable, objective and, when needed, multi-disciplinary forensic analyses in more than 30 research fields, such as DNA, pathology and toxicology, but also digital technology and weapons, for example. The results play an important role in detection, prosecution and legal cases. In all instances, the NFI is engaged in cases that have a direct influence on daily life. That’s what makes working for the NFI so special. Because the law touches people’s lives.

De afdeling - Digital and Biometric Traces division

The Digital and Biometric Traces (DBS) division is primarily engaged in forensic research into automated systems. This involves reviewing many types of software and hardware. DBS not only works for the police and the Ministry of Security and Justice, but also for the Royal Military Police, the Fiscal and Social Intelligence and Investigation Services, the General Inspectorate and the National Constabulary.

Clients often employ specialised experts themselves. In such instances, DBS also performs investigations into complex cases in which clients are unable to make further progress themselves. DBS also receives (foreign) requests for legal assistance in the digital field. Due to the enormous technological developments in this field, DBS invests a considerable amount of time in research and development (R&D) and knowledge transfer.

The department works on innovative projects in close cooperation with various universities and knowledge institutes, both nationally and internationally. The excellent results of these projects have contributed towards the NFI gaining an excellent international reputation in the field of digital technology. The department participates in the FIDIS Network of Excellence. Around one hundred people work at DBS.

Functiegroep

Deze vacature valt in de functiegroep Wetenschappelijk Medewerker. Binnen het Functiegebouw Rijk staat deze functiegroep omschreven als: uitvoeren en inhoudelijk verantwoordelijk zijn voor (complexere) wetenschappelijke onderzoeken.

Wil je meer over de functiegroep Wetenschappelijk Medewerker en de betreffende doorgroeimogelijkheden te weten komen, ga dan naar het .

Wil je meer weten over het Functiegebouw Rijk? .

Functiegroep Rijk

Om functies van medewerkers te beschrijven, werkt het Rijk met functiegroepen. Bijvoorbeeld de functiegroep beleidsmedewerker. Voorheen hadden ministeries en grote diensten, zoals de Belastingdienst en Rijkswaterstaat, hun eigen functiebeschrijvingen. Hierdoor waren functies moeilijk vergelijkbaar en hadden medewerkers weinig inzicht in welk soortgelijk werk binnen het Rijk aanwezig is en wat alternatieve loopbaanmogelijkheden zijn.

De ruim 30.000 functiebeschrijvingen zijn nu ingewisseld voor slechts 52 functiegroepen. Er is één gemeenschappelijk taal ontstaan waardoor vergelijkbaarheid tussen functies nu wel mogelijk is en de verschillende loopbaanmogelijkheden binnen het Rijk zichtbaar worden. Met de nieuwe resultaat- en ontwikkelgerichte functieprofielen worden medewerkers en leidinggevenden geholpen bij het maken van concrete werk- en ontwikkelafspraken.

De 52 functieprofielen staan beschreven in de website Functiegebouw Rijk. De website laat ook passende vacatures zien en de stappen die medewerkers in hun loopbaan kunnen maken.

Nog 9 dagen

Je kunt nog tot 15 februari 2017 solliciteren.

Extra informatie

Status
Inactief
Plaats
waren
Dienstverbanden
Fulltime (startersfunctie)

Fulltime (startersfunctie)

We heten wel YoungCapital, maar iedereen is even welkom. Ook als je al wat meer ervaring hebt. Meer weten? Check onze FAQ.