iOS Vulnerability Researcher
Role details
Job location
Tech stack
Job description
-
You'll join our team looking to identify vulnerabilities in Apple platforms using both static and dynamic analysis techniques.
-
You'll develop Proof-of-Concepts for vulnerabilities identified.
-
You'll use common VR toolsets such as fuzzers, LLMs and reverse engineering tools; as well as have access to custom tooling built in-house (along with developing your own!).
-
You'll need to present your findings in a useful and accessible way to others.
-
You'll have access to internal and external training and conferences to refine and hone your skillsets.
Requirements
We are looking for experienced and passionate people who have a background in vulnerability research, offensive security and reverse engineering on Apple platforms., * Developed tools and proof of concepts in a modern programming language such as Python and Rust.
-
Skills in debugging and hacking around with low level or other relevant languages such as C, Swift, C++, Objective C, etc.
-
Ability to reverse engineer ARM64 binaries using common toolsets such as IDA, Binary Ninja and Frida.
-
Direct experience carrying out security research, reverse engineering or exploit development on Apple platforms, including any of the following or similar:
-
Research on the low-level internals of Apple platforms, including topics such as runtime internals, platform security features and exploit mitigations.
-
Reverse engineering and vulnerability research on userland components on Apple platforms including XPC protocols, private frameworks and userland system daemons.
-
iOS application reverse engineering and bug hunting, looking for weaknesses, logic bugs and memory corruption issues.
-
Kernel or system level software internals and vulnerability research, for example XNU code review or IOKit reverse engineering and exploitation.
-
Interest and a passion in learning new things, taking them apart, and getting stuck into new problems and challenges.
Benefits & conditions
Packages are competitive and differ according to researcher experience. Full details can be discussed upon an invitation to interview.
Perks and benefits:
-
25 days annual leave, rising by 1 day per year up to 28 days + bank holidays
-
Annual bonus based on company targets
-
6% matched pension
-
Training and conference budgets
-
Private medical insurance
-
Employee assistance program
-
4x death in service
-
Cycle to work scheme
-
Company socials throughout the year
-
Free soft drinks, hot drinks, beer and snacks in office
The location:
You'll have the opportunity to work remotely, from our office in the centre of Basingstoke, UK (6-minute walk from the local shopping centre & train station) or from our London office (Southwark).
Interrupt Labs is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.