iOS Vulnerability Researcher

This is a fully remote position, open to applicants in Greece.

📋 Description

• Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e.

• Identify and explore previously unknown vulnerabilities in iOS userland components.

• Analyze system daemons, XPC services, framework APIs, parsers, and other undocumented iOS/macOS components.

• Develop targeted fuzzers and harnesses.

• Create reliable proof-of-concepts and undocumented techniques within controlled research environments.

• Investigate the practical implications of PAC, MTE/MIE, sandboxing, hardened runtime protections, and related platform defenses.

• Build custom tools for binary analysis, instrumentation, tracing, fuzzing, and vulnerability research.

• Collaborate with fellow researchers on various projects.

⛳️ Requirements

• Hands-on experience in vulnerability research, reverse engineering, exploitation research, or a closely related field in security research.

• Strong grasp of C/C++ fundamentals, memory corruption concepts, and common vulnerability classes.

• Solid knowledge of ARM64/ARM64e assembly language and calling conventions.

• Practical experience using IDA Pro, Ghidra, Hopper, or Binary Ninja.

• Proficient in debugging with lldb.

• Capable of performing crash analysis without a fully functional debugging environment.

• Experience with Frida, DTrace, custom instrumentation, or similar dynamic-analysis tools.

• Competent in writing research tools in Python and at least one systems programming language such as C, C++, Objective-C, or Swift.

• Understanding of Objective-C and Swift runtime behavior along with iOS process architecture.

• Familiarity with fuzzing methodologies and experience in constructing or modifying fuzzing harnesses.

• Ability to assess exploitability beyond merely discovering crashes.

• Adaptable when the complete technical situation is not fully clear.

• Previous experience in iOS or macOS vulnerability research is preferred.

• Public vulnerability disclosures, CVEs, security advisories, conference presentations, or significant private research experience are preferred.

• Familiarity with arm64e Apple-specific internals is preferred.

• Knowledge of modern iOS exploitation mitigations is preferred.

• Experience adapting research methodologies across different iOS releases and handling undocumented platform changes is preferred.

• Familiarity with reversing Objective-C binaries is preferred.

• Experience with iOS/macOS IPC mechanisms such as mach messages, MIG, and XPC is preferred.

🏝️ Benefits

• Birthday Paid Day off.

• Complimentary coffee, lunch, and office snacks.

• Private Medical and Life Insurance covering both employees and their family members.

• Funded certifications and postgraduate programs.

• Recognition programs including welcome gifts, new year celebration gifts, referral bonuses, and long service vouchers.

• Exposure to international teams, leadership, and challenges.

• Opportunities for professional growth, development, innovation, and more.

• Competitive salary and benefits.