CNO Developer - (Android/iOS)

• Design, Develop, and Deploy: Design, develop, test, and deploy custom CNO capabilities for Android and iOS platforms.
• Software Development: Develop, test, and debug software using C, C++, Python, and mobile native development environments.
• Vulnerability Research: Conduct vulnerability research, exploit development, and proof-of-concept creation.
• Kernel and User-Space Debugging: Perform kernel- and user-space debugging using industry-standard debugging tools.
• Reverse Engineering: Reverse engineer native binaries, operating system components, and mobile applications.
• Operating System Research: Research mobile operating system internals, kernel subsystems, and platform security mechanisms.
• Application Analysis: Perform application analysis, behavioral analysis, and software instrumentation.
• Low-Level Analysis: Trace execution using low-level tooling to identify, isolate, and resolve complex technical issues.
• Technical Documentation: Produce technical documentation supporting operational deployment and long-term sustainment.
• Technical Leadership: Mentor junior engineers and collaborate with multidisciplinary technical teams.

• TS/SCI Clearance is mandatory
• Advanced software development experience in C, C++, and Python.
• Experience developing native software for Android and/or iOS platforms.
• Experience with exploit development and memory corruption research.
• Strong understanding of kernel internals and low-level debugging.
• Strong knowledge of UNIX/Linux internals and systems programming.
• Experience with network socket programming and protocol analysis.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, LLDB, GDB, Frida, or equivalent.
• Knowledge of modern operating system security protections, including ASLR, DEP/NX, sandboxing, code signing, pointer authentication, etc., and associated bypass techniques.
• Experience with version control systems such as Git.

Desired Experience

• Mobile vulnerability research across Android and iOS.
• Experience with ARM64/AArch64 assembly language.
• Experience with dynamic instrumentation and hooking frameworks (e.g., Frida).
• Familiarity with Android security mechanisms, including SELinux, Verified Boot, sandboxing.
• Familiarity with iOS security architecture, including XNU, AMFI, Secure Enclave, code signing, entitlements, sandboxing.
• Experience with mobile exploit chaining and post-exploitation techniques.
• Experience developing offensive tools supporting operational environments.
• Ability to work independently in a fast-paced, highly technical environment.

Pay: $200,000.00 - $250,000.00 per year

Application Question(s):

• Do you have hands-on experience developing native software for Android and/or iOS platforms?
• Do you have hands-on experience with vulnerability research, exploit development, and memory corruption research in a low-level systems environment?