iOS Vulnerability Researcher

Job not on LinkedIn

🔥 44 minutes ago

🇬🇷 Greece – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🍏 iOS Engineer

Where this job comes from

Posted on CENSUS's careers page, not through a job board

First seen by Remote Rocketship 44 minutes ago

Still open on CENSUS's site. Checked 30 minutes ago.

Logo of CENSUS

CENSUS

51 - 200 employees

💼 Consulting

🏥 Healthcare

🔒 Cybersecurity

Consulting • Healthcare • Cybersecurity

CENSUS is a cybersecurity company that provides in-depth security testing and advisory services. They offer a range of services including Tiger Team and Penetration Testing, comprehensive mobile app testing, and Secure Software Development Lifecycle (SDLC) practices. CENSUS engages in cybersecurity engineering to protect digital assets and infrastructures. They also focus on product and organization security, vulnerability research, and provide advisory services for various digital security challenges. CENSUS is actively involved in the cybersecurity community, participating in notable events like the Cybersecurity Financial Services Summit and the Autotech Europe Forum.

📋 Description

• Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e • Identify and investigate previously unknown vulnerabilities in iOS userland components • Analyze system daemons, XPC services, framework APIs, parsers, and other undocumented iOS/macOS components • Develop targeted fuzzers and harnesses • Develop reliable proof-of-concepts and undocumented techniques in controlled research environments • Research the practical impact of PAC, MTE/MIE, sandboxing, hardened runtime protections, and related platform defenses • Develop custom tooling for binary analysis, instrumentation, tracing, fuzzing, and vulnerability research • Collaborate with other researchers on projects

🎯 Requirements

• Hands-on vulnerability research, reverse engineering, exploitation research, or closely related security research experience • Strong understanding of C/C++ fundamentals, memory corruption, and common vulnerability classes • Solid ARM64/ARM64e assembly and calling-convention knowledge • Practical experience with IDA Pro, Ghidra, Hopper, or Binary Ninja • Experience debugging with lldb • Experience performing crash analysis without a fully capable debugging environment • Experience with Frida, DTrace, custom instrumentation, or comparable dynamic-analysis tooling • Ability to write research tooling in Python and at least one systems language such as C, C++, Objective-C, or Swift • Understanding of Objective-C and Swift runtime behavior and iOS process architecture • Familiarity with fuzzing methodologies and experience building or adapting fuzzing harnesses • Ability to reason about exploitability beyond crash discovery • Ability to adapt when the complete technical picture is not present • Previous iOS or macOS vulnerability research preferred • Public vulnerability disclosures, CVEs, security advisories, conference talks, or substantial private research experience preferred • Familiarity with arm64e Apple-specific internals preferred • Familiarity with modern iOS exploitation mitigations preferred • Experience adapting research techniques between iOS releases and dealing with undocumented platform changes preferred • Experience with reversing Objective-C binaries preferred • Experience with iOS/macOS IPC mechanisms such as mach messages, MIG, and XPC preferred

🏖️ Benefits

• Birthday Paid Day off • Coffee, lunch and office snacks free of charge • Private Medical and Life Insurance covering employees & family members • Funded certifications & postgraduate programs • Recognition programs including welcome gift, new year celebration gift, referral bonus and long service vouchers • Exposure to international teams, leaders, and challenges • Opportunities for professional growth, development, innovation, and more • Competitive salary and benefits

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok