Quarkslab is building new tools to analyze what is going on with the security of computer systems, from a new multi-platform dynamic binary instrumentation tool (https://github.com/quarkslab/QBDI) to a symbolic execution framework like Triton (http://triton.quarkslab.com) and several other advanced software security tools. As code bases grow faster and faster in size and complexity, new simple yet powerful toolsneed to be designed to help security practitioners and researchers in their daily work.
System audits and vulnerability research must be taken to a new stage and we are working towards that goal.
Founded 6 years ago, Quarkslab is working internationally since its origins. Whereas we are based in Paris (France), we are now opening offices in Japan and Argentina.
Send a resume to the email address provided in the job description.
Explain in your message the relevant projects (links to published code is better!) you have been working on to demonstrate you fit the position and why you are applying. Make it personal, we are interested in people motivated to be involved in taking Quarkslab to a new stage.
We will reply with a small challenge to give us the opportunity to discuss both what we are building, and how you can bring your own experience in that.
Quarkslab, a high-end cybersecurity company founded 5 years ago, is looking for a devops engineer with advanced sysadmin skills to reinforce his team.
It has been four years since Quarkslab has launched the development of the Epona LLVM bytecode obfuscator (https://epona.quarkslab.com). In order to expand the Epona team, Quarkslab is looking for a compiler engineer, motivated by research and development on a stable and yet still evolving compiler project based on LLVM.
Part of the team presented this work at the 2017 LLVM developer meeting (https://www.youtube.com/watch?v=d72Snpxx4Co).
Quarkslab is based in Paris, but most of the compilation team is working remotely around Lyon. Working remotely is thus possible :)
You are :
Are you looking for something really different? Tired of optimizing, fine tuning your compiler to rip the best performance of the hardware? We are building our own compiler!
Don't miss this opportunity to inject your small touch of madness and make it live and grow within user code! But be aware that you will also be responsible for testing, debugging and deploying your crazyness into a multi-os, multi-arch environment!
To assess your compiler skills, and challenge your creativity, we're proposing a small test: guard a single basic block by an opaque predicate that is always true, but not trivially true. That's a very basic obfuscation, you should be able to deal with it in less than an hour. A solution in LLVM would be appreciated, but any compiler infrasturure (and input language) is a valid option. In C, that would be as simple as turning:
if(1 /* find something better*/) stuff();
Please submit your solution alongside your CV if you're applying for the job!