Title: Sr. Software Engineer, Android - Fandango Location: 7580 Golf Channel Drive, Orlando, FL Job Description: - Employees can work remotely - Full-time - Business Segment: Digital Platforms & Ventures Company Description VERSANT (Nasdaq: VSNT) is an industry-changing media and entertainment business and home to trusted brands that shape culture, inform audiences, and build lasting connections. It operates across four core markets: political news and opinion, business news and personal finance, golf, and sports and genre entertainment. These markets are served through a powerful portfolio of iconic and innovative brands, including CNBC, MS NOW, USA Network, Golf Channel, Oxygen, E!, SYFY, and Versant's sports division USA Sports, along with complementary digital assets including Fandango, Rotten Tomatoes, GolfNow and GolfPass. Job Description The Opportunity Fandango is seeking a Senior Android Software Engineer to join the Video Player team. In this role, you will help design, build, and maintain Android video playback technologies, including ownership of the Video Player SDK. Why This Role Matters: Your work will directly support reliable, high-quality streaming experiences for millions of users. You will collaborate with engineers across platforms to strengthen video playback performance, scalability, and long-term maintainability across Fandango’s digital products. This is a fully remote role, with opportunities for in-person collaboration approximately 10% of the time based on business needs. What You’ll Do - Design, develop, and maintain an Android Video Player SDK using Kotlin, Java, and Android media frameworks. - Lead and contribute to scalable architecture for cross-platform video playback solutions. - Implement and optimize streaming, buffering, DRM, offline playback, and performance-related video features. - Partner with engineering, QA, and operations teams to reproduce, diagnose, and resolve playback issues across the video pipeline. - Write clean, performant, maintainable code and contribute to strong engineering practices through code reviews and documentation. - Provide technical guidance and mentorship while staying current with Android and streaming media best practices. Qualifications What You Bring - 3+ years of professional Android development experience, with strong proficiency in Kotlin and/or Java. - Experience with Media3 and/or ExoPlayer, including DASH and/or HLS streaming and Widevine DRM. - Strong understanding of video playback concepts, streaming protocols, buffering, bitrate adaptation, device-specific behavior, and performance optimization. - Experience building reliable, reusable platform components or SDKs. - Strong problem-solving skills, attention to detail, and the ability to work effectively in a collaborative engineering environment. - Trust: You write reliable, maintainable code and follow through on technical commitments. - Teamwork: You collaborate across engineering, QA, operations, and platform teams to solve complex playback challenges. - Transparency: You communicate technical tradeoffs, document decisions, and share knowledge clearly. - Agility: You adapt to evolving product needs, platform changes, and emerging streaming technologies. - Entrepreneurial Spirit: You take ownership of complex technical problems and look for scalable, forward-thinking solutions. Bonus points for experience with analytics, QoE metrics, video instrumentation, web, Roku, iOS, other streaming platforms, video ad integrations such as IMA SDK, VAST, or VMAP, CI/CD pipelines, and automated testing for media applications. Why You’ll Love It Here At VERSANT, you’ll help shape technology that powers trusted entertainment experiences across screens and services. You’ll join a collaborative, product-focused engineering environment where your work has meaningful impact, your technical perspective is valued, and you have room to grow. This role is remote, with periodic in-person collaboration opportunities to support team connection, planning, and business priorities. Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with a VERSANT Media employee at one of our locations prior to a hiring decision. VERSANT Media's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. For LA County and City Residents Only: VERSANT Media will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable. If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. VERSANT Media is committed to fair and equitable compensation practices. We include a good faith pay range for each position to comply with applicable state and local pay transparency laws and to promote equity across our organization. Actual compensation will be based on factors such as the candidate's skills, qualifications, experience, and location and may include additional forms of compensation and benefits such as health insurance, retirement plans, paid time off, etc. VERSANT Media is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at VERSANT via-email, the Internet, or in any form and/or method without a valid written Statement of Work in place for this position from VERSANT's Talent Acquisition team will be deemed the sole property of VERSANT. No fee will be paid in the event the candidate is hired by VERSANT as a result of the referral or through other means.

Role Description We are looking for a senior researcher with deep practical experience identifying and exploiting vulnerabilities across Chrome sandbox boundaries on Android. You should already know how to move from a compromised renderer or low-privilege browser process to a meaningful trust-boundary violation. The goal is stable, chainable sandbox-escape capability on real Android targets. What you’ll work on - Renderer-accessible Mojo interfaces, interface brokers and browser-process endpoints. - GPU, media, network, utility, device and other services reachable from low-privilege Chrome processes. - Android-specific Chrome integration, including platform bridges, Binder-facing components, permissions and service boundaries. - Confused-deputy conditions, validation gaps, unsafe deserialisation, lifetime errors, races and state-machine mistakes. - Cross-process exploitation where asynchronous IPC, handles, shared memory or capability transfer affect reliability. - End-to-end chains with renderer and Android-kernel researchers when needed. What you’ll deliver - Original vulnerabilities that cross a Chrome process, privilege or trust boundary on Android. - Reliable sandbox-escape exploit components that work under production mitigations. - Prioritised attack-surface areas that are deemed to be complex enough to contain vulnerabilities. - Triggers, PoCs, exploitability analysis, target assumptions and complete technical handover. - Reusable tooling for IPC discovery, Mojo message generation, tracing, instrumentation, coverage and variant analysis. Qualifications - Demonstrable delivery of Chrome/Chromium sandbox escapes, browser-process vulnerabilities or closely comparable cross-privilege exploitation. - Deep knowledge of Chromium’s multi-process architecture, sandbox policy and renderer-to-browser trust boundaries. - Strong practical experience with Mojo IPC, bindings, data pipes, shared memory, interface ownership and message validation. - Advanced C++ vulnerability-research and exploitation skills in complex multi-process targets. - Working knowledge of Android internals relevant to Chrome, including application isolation, SELinux domains, Binder and platform services. - The ability to turn a subtle boundary mistake into a stable result that can be integrated into a wider chain. - Independent research ownership and a consistent history of finishing high-difficulty work. Strong signals - Credited Chrome sandbox escapes or comparable real-world cross-privilege exploit delivery. - Custom Mojo fuzzers, IPC introspection tools or Chrome instrumentation frameworks. - Experience chaining renderer compromise through sandbox escape to Android system or kernel impact. - Research across multiple Android OEMs, chipsets and Chrome branches. - Vulnerabilities found made it to stable/beta releases. - Strong patch-analysis and variant-hunting results. How we work - Fully remote, with high autonomy and close collaboration between browser, platform and kernel specialists. - We measure progress through technically meaningful, reproducible delivery. - Public CVEs are not a requirement.

Role Description We are hiring an exploit developer who has already shipped Android or Linux kernel exploits that work outside a laboratory-perfect setup. This is a senior individual-contributor role for someone who can take a weak or unstable primitive, model the allocator and concurrency behaviour around it, work through modern mitigations and deliver a robust exploit with clear assumptions and failure modes. What you’ll work on - Zero-day and N-day Android kernel vulnerabilities across vendor kernels and device-specific drivers. - Use-after-free, out-of-bounds access, reference-counting flaws, races, type confusion and logic vulnerabilities. - Allocator shaping, object replacement, cross-cache techniques, page reuse, reclaim strategies and controlled race amplification. - Control-flow-independent and data-only exploitation where traditional hijacking is not the best path. - Target adaptation across kernel branches, Android releases, OEM configurations, SoCs and patch levels. - Integration with browser and userspace researchers on complete exploit chains. What you’ll deliver - Reliable local-privilege-escalation or kernel-code-execution exploit components for modern Android targets. - Reusable primitives for information disclosure, controlled read/write, object overlap, credential manipulation or equivalent goals. - Target-aware exploit packages with setup, fingerprinting, diagnostics, cleanup and regression coverage. - Explicit reliability data, environmental assumptions and known failure modes. - New techniques for hardened kernels, unstable races or constrained vendor attack surfaces. Qualifications - A substantial record of delivering working Android or Linux kernel exploits — not only finding bugs or producing crashes. - Expert knowledge of kernel memory management, object lifetimes, concurrency, locking, scheduling and common driver architectures. - Advanced SLUB and kernel-heap exploitation experience, including modern cross-cache or page-level techniques. - Strong ARM64 reverse engineering and debugging skills across source-available and partially proprietary components. - Practical knowledge of Android GKI, vendor modules, Binder, SELinux and mobile driver attack surfaces. - Deep familiarity with KASLR, PAN/PXN, CFI, PAC/BTI where relevant, hardened usercopy, refcount hardening and memory-tagging constraints. - The discipline to turn probabilistic exploitation into maintainable, testable delivery. Requirements - Exploits delivered across several Android OEMs, SoCs or kernel families. - Original exploitation techniques demonstrated through published research or production-grade exploit delivery. - Experience with Binder, GPU, multimedia, networking, filesystem, DMA-BUF or OEM driver targets. - Kernel fuzzing, crash triage, patch analysis and rapid exploitability assessment. - A history of solving difficult stabilisation and mitigation-bypass problems for other senior engineers. How we work - Fully remote, with high autonomy and direct collaboration with vulnerability researchers and exploit developers. - We care about reliable capability and reproducible engineering, not flashy one-off demos. - N-day experience is valuable when it demonstrates advanced adaptation and exploitation depth. Public credits are welcome but not required.

Role Description We are looking for a Mobile Engineer (React Native) to build POS applications and backend features in React Native and Node.js for a major QSR platform, working within an established architecture. You will develop TypeScript features for the POS tablet app, maintain Node.js service endpoints, and build reliable offline-first experiences using modern synchronization approaches. You will also participate in code reviews and Agile delivery, with active use of AI-assisted development tools as part of your daily work. We prioritize quality over speed, so strong engineering fundamentals and hands-on production experience are essential. What You Will Do - Build React Native and TypeScript features for the POS tablet app within established patterns. - Implement and maintain Node.js and TypeScript service endpoints. - Write clean, well-tested code and take part in code reviews. - Debug and resolve defects and production issues for your features. - Participate in Agile delivery, including planning, estimation, and retrospectives. Qualifications - 4+ years of software engineering experience, with production delivery preferred. - Hands-on experience with offline-first or local-first data beyond simple caching, using Automerge, Ditto, or comparable CRDT-based sync frameworks. - Solid experience with React Native and TypeScript, with the ability to write Node.js backend code. - Strong fundamentals in data structures, API design, debugging, and testing. - Experience with REST APIs, service-based architectures, databases, and persistence. - Ability to follow established architecture and standards. - Experience using AI-assisted development tools such as Claude and GitHub Copilot as part of day-to-day development. - Upper-intermediate English level. Nice to Haves - Exposure to AWS serverless services such as Lambda, DynamoDB, and SQS. - Offline-first or state-management experience. - Experience with test-driven development. - QSR or retail experience. Benefits - Growth without limits: build your skills through mentorship, internal TechTalks, challenging projects, and a dedicated annual learning budget. - Competitive compensation: get recognition that reflects your skills and impact, with regular performance and compensation reviews. - Flexibility: work 100% remotely with flexible hours that support focus, autonomy, and a healthy work rhythm. - Meaningful, modern projects: build impactful products using modern technologies alongside global teams and leading brands. - Collaborative culture: join a supportive environment with zero micromanagement where ideas are welcomed and contributions are recognized. - Well-being & support: access local well-being programs and people-focused support tailored to your location.