Java Compiler Engineer

Quarkslab is a French company specializing in information security R&D, consulting and software development. Our expertise is in combining offensive and defensive security to help organizations adopt a new security posture: Force the attackers, not the defender, to adapt constantly. Through our consulting services as well as our software we provide tailored solutions to organizations, helping them to protect their assets, sensitive data, and users against increasingly sophisticated attacks.

Quarkslab is an avid and active user of, and contributor to, Open Source Software and develops and maintains state-of-the-art security tools such as LIEF , QBDI, Triton, Irma, and several other projects.

We develop two commercial software products: QFlow, a platform to automate and orchestrate security analysis of files at scale, and QShield, advanced code and data protection software to disrupt code lifting, reverse engineering and tampering attacks.

The QShield team is looking for a Java compiler engineer to help maintain and develop their current Java/Kotlin software protection solution, which leverages previous experiments to make Java and LLVM work together in order to reuse the capabilities of their C/C++ protection tool, but which also implements other tricks.

Current challenges involve designing and implementing static and dynamic obfuscations to increase the level of protection, ensuring that all layers of protections fit properly with each other, in particular along the frontier between the virtual machine and the native world. All this with an eye on performance, and of course on the evolution of reverse engineering tools.

If you like compilation, technical challenges, and are curious about security, you will love this job!

Key Responsibilities

• Develop and maintain our Java code obfuscator in collaboration with the team
• Ensure the quality of the delivered product in terms of security, performance and code size
• Communicate your developments to the rest of the team.

What is QShield?
At Quarkslab we develop QShield, a software for application protection. Our solutions include a tool to protect Java/Kotlin programs and a C/C++ code-obfuscator based on LLVM, a white-box cryptography library, a RASP framework, a digital vault and remote attestation solutions. All these components help to increase the security of applications and firmware/middleware to protect IP, APIs, secrets and every sensitive information used or provided by software.

Why work at Quarkslab?
Work with an amazing team, eager to learn and play with new approaches and technologies, mixing various skills (security, compilation, program analysis, reverse engineering, software engineering). International environment with offices in Paris and Buenos Aires (team croissants vs. team asado), representations in Tokyo and Singapore.

• Attend conferences in your field, learn from many internal events (weekly conference, trainings, research activities).
• Contribute and support Open Source Software: Our own tools and other people’s projects.
• Flexible work hours, work from home.
• Premium health insurance.

Our recruitment process:

1. Call with our talent acquisition manager.
2. Video call with the Hiring Manager.
3. Do a short programming challenge
4. Interview with C-Level, QAS business unit and HR Manager at Quarkslab’s Office (or remote due to Covid).
5. HR debrief and job offer.

QuarksLab is proud to be an equal opportunity workplace employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or gender identity. If you have a disability or special need that requires accommodation, please let us know and we will be happy to accommodate.

The skills or knowledge we think you should have:

• Familiar with LLVM or other compilation framework
• Development in C++ and Java
• Team player to exchange about your knowledge with others
• Spoken English

But also, that would be nice if you knew:

• Java or Kotlin, and even better if you already played with the virtual machine internals
• JNI
• Reverse engineering
• Cmake, Git and Gitlab
• Python