SonicJobs Logo
Left arrow iconBack to search

iOS Vulnerability Researcher

Interrupt Labs
Posted 4 months ago, valid for 12 days
Location

Arlington, VA 22226, US

Salary

Competitive

Contract type

Full Time

Employee Assistance

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Sonic Summary

info
  • We are seeking experienced individuals with a background in vulnerability research, offensive security, and reverse engineering on Apple platforms.
  • The role involves identifying vulnerabilities using static and dynamic analysis techniques, developing Proof-of-Concepts, and utilizing various VR toolsets.
  • Candidates should have experience with modern programming languages like Python and Rust, as well as debugging skills in languages such as C and Swift.
  • A competitive salary package will be offered, which varies based on the candidate's experience, with full details discussed during the interview process.
  • This remote position allows candidates to work from anywhere in the USA or globally, and includes benefits like paid vacation, healthcare, and training budgets.

We are looking for experienced and passionate people who have a background in vulnerability research, offensive security and reverse engineering on Apple platforms.

The role:

  • You'll join our team looking to identify vulnerabilities in Apple platforms using both static and dynamic analysis techniques.

  • You'll develop Proof-of-Concepts for vulnerabilities identified.

  • You'll use common VR toolsets such as fuzzers, LLMs and reverse engineering tools; as well as have access to custom tooling built in-house (along with developing your own!).

  • You'll need to present your findings in a useful and accessible way to others.

  • You'll have access to internal and external training and conferences to refine and hone your skillsets.

The ideal candidate:

  • Developed tools and proof of concepts in a modern programming language such as Python and Rust.

  • Skills in debugging and hacking around with low level or other relevant languages such as C, Swift, C++, Objective C, etc.

  • Ability to reverse engineer ARM64 binaries using common toolsets such as IDA, Binary Ninja and Frida.

  • Interest and a passion in learning new things, taking them apart, and getting stuck into new problems and challenges.

Desirable technical experience:

  • Research on the low-level internals of Apple platforms, including topics such as runtime internals, platform security features and exploit mitigations.

  • Reverse engineering and vulnerability research on userland components on Apple platforms including XPC protocols, private frameworks and userland system daemons.

  • iOS application reverse engineering and bug hunting, looking for weaknesses, logic bugs and memory corruption issues.

  • Kernel or system level software internals and vulnerability research, for example XNU code review or IOKit reverse engineering and exploitation.

Salary:

Packages are competitive and differ according to researcher experience. Full details can be discussed upon an invitation to interview.

Perks and benefits:

  • 25 days paid vacation + federal holidays

  • Annual bonus based on company targets

  • Matched 401k scheme up to 4%

  • Healthcare, dental and vision cover

  • Training and conference budgets

  • Employee assistance program

  • Company socials throughout the year

The location:
This is a remote role so the successful candidate can be based anywhere in the USA, or indeed the world!


Interrupt Labs is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We aim to respond to all candidates via email within a week of their application. Please note that emails may go to your spam or junk folder.




Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.