Remote Jobs RockRemote Jobs Rock

iOS Vulnerability Researcher

๐Ÿ”ฅ 6 hours ago
iOS Vulnerability ResearchReverse EngineeringC/C++Arm64/arm64e Assembly
Apply Now

๐Ÿ“œ Description

  • Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e.
  • Investigate vulnerabilities in iOS userland components, daemons, XPC services, APIs, and parsers.
  • Build targeted fuzzers, harnesses, and custom analysis and instrumentation tools.
  • Develop proof-of-concepts and assess exploitability and the impact of platform mitigations.
  • Collaborate with other security researchers.

๐Ÿ› ๏ธ Requirements

  • Hands-on experience in vulnerability research, reverse engineering, exploitation research, or related security research.
  • Strong C/C++ fundamentals and knowledge of memory corruption and common vulnerability classes.
  • Solid ARM64/ARM64e assembly and calling-convention knowledge.
  • Experience with reverse-engineering tools such as IDA Pro, Ghidra, Hopper, or Binary Ninja, and debugging with lldb.
  • Experience with crash analysis and dynamic-analysis tools such as Frida, DTrace, or custom instrumentation.
  • Ability to write research tooling in Python and a systems language such as C, C++, Objective-C, or Swift.
  • Understanding of Objective-C and Swift runtime behavior, iOS process architecture, and fuzzing methodologies.
  • Ability to assess exploitability and adapt when technical information is incomplete.

โœจ Benefits

  • Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.
  • ๐Ÿค A collaborative, purpose-driven team with a strong learning mindset
  • ๐ŸŽ‚ Birthday Paid Day off
  • ๐Ÿช Coffee, lunch and office snacks free of charge
  • โš•๏ธPrivate Medical and Life Insurance covering employees & family members
  • ๐ŸŽ“ Funded certifications & postgraduate programs
  • ๐ŸŽ Recognition programs including welcome gift, new year celebration gift, referral bonus and long service vouchers
  • ๐ŸŒ Exposure to international teams, leaders, and challenges
Full job description

CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.

About the Role

CENSUS is looking for a iOS Vulnerability Researcher to join our security research team, focused on vulnerability discovery and exploitation across the iOS userland attack surface.

Youโ€™ll spend your time reverse engineering proprietary Apple software, identifying security boundaries and interesting attack surfaces, developing fuzzers and instrumentation, and turning promising primitives into reliable vulnerability research.

This is a hands-on research role for someone who enjoys working close to the metal, understands Apple's ecosystem and is comfortable operating without complete documentation.

Responsibilities

  • Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e.
  • Identify and investigate previously unknown vulnerabilities in iOS userland components.
  • Analyze system daemons, XPC services, framework APIs, parsers, and other undocumented components of the iOS/macOS system.
  • Develop targeted fuzzers and harnesses.
  • Develop reliable proof-of-concepts and undocumented techniques in controlled research environments.
  • Research the practical impact of modern mitigations including PAC, MTE/MIE, sandboxing, hardened runtime protections, and related platform defenses.
  • Develop custom tooling for binary analysis, instrumentation, tracing, fuzzing, and vulnerability research.
  • Collaborate with other researchers on projects.

Technical Requirements

  • Hands-on vulnerability research, reverse engineering, exploitation research, or closely related security research experience.
  • Strong understanding of C/C++ fundamentals, memory corruption, and common vulnerability classes.
  • Solid ARM64/ARM64e assembly and calling-convention knowledge.
  • Practical experience with reverse engineering using tools such as IDA Pro, Ghidra, Hopper, or Binary Ninja.
  • Experience debugging with lldb.
  • Experience performing crash analysis without a fully capable debugging environment.
  • Experience with Frida, DTrace, custom instrumentation, or comparable dynamic-analysis tooling.
  • Ability to write research tooling in Python and at least one systems language such as C, C++, Objective-C, Swift.
  • Understanding of Objective-C & Swift runtime behavior and iOS process architecture.
  • Familiarity with fuzzing methodologies and experience building or adapting fuzzing harnesses.
  • Ability to reason about the exploitability of a vulnerability rather than stopping at crash discovery.
  • Being able to adapt to scenarios where the complete technical picture is not present.

Preferred Experience

Previous iOS or macOS vulnerability research.

Public vulnerability disclosures, CVEs, security advisories, conference talks, or substantial private research experience.

Familiarity with arm64e Apple specific internals

Familiarity with modern iOS exploitation mitigations.

Familiarity with jailbreak-era or modern iOS research tooling is useful, but not required.

Experience adapting research techniques between iOS releases and dealing with

undocumented platform changes.

Experience with reversing Objective-C binaries.

Experience with iOS/macOS IPC mechanisms, such as mach messages, MIG, and XPC

What We Offer

Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.

The chance to be part fast-growing, global cybersecurity company

A collaborative, purpose-driven team with a strong learning mindset

Competitive salary and benefits, such as but not limited to:

    • Birthday Paid Day off
    • Coffee, lunch and office snacks free of charge
    • Private Medical and Life Insurance covering employees & family members
    • Funded certifications & postgraduate programs
    • Recognition programs including a welcome gift, a new year celebration gift, referral bonus and long service vouchers
    • Exposure to international teams, leaders, and challenges
    • Opportunities for professional growth, development, innovation, and more!


Apply today to start the conversation with the People & Culture Team.

CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.

LI | Remote

Fastly

Threat Detection Analyst (Japanese Speaking desirable)

๐Ÿ•’ 15 days ago
Fastly๐Ÿ‘ฅ 10,000+ employees๐Ÿข Software Development๐Ÿค B2B

Monitor customer traffic to detect and investigate internet-scale threats, lead incident response and real-time mitigations, tune security policies, and communicate actionable findings to managed security clients.

Threat DetectionIncident ResponseWeb Application SecurityOWASP Top 10
Arista Networks

Security Operations Center (SOC) Analyst

๐Ÿ•’ yesterday
Arista Networks๐Ÿ‘ฅ 5001 - 10,000 employees๐Ÿข Computer Networking

Monitor and investigate security threats across Mac, Linux, and Windows environments, build and refine detections, hunt for threats, and coordinate incident response with security and cross-functional teams.

CrowdstrikeEndpoint Detection And Response (edr)Crowdstrike Query Language (cql)SIEM
Arista Networks

Security Operations Center (SOC) Analyst

๐Ÿ•’ yesterday
Arista Networks๐Ÿ‘ฅ 5001 - 10,000 employees๐Ÿข Computer Networking

Monitor and investigate security alerts, hunt threats, and build detections across Mac, Linux, and Windows environments while coordinating incident response and strengthening security controls.

CrowdstrikeEndpoint Detection And Response (edr)Crowdstrike Query Language (cql)SIEM
Sentinel Blue

SOC Analyst II

๐Ÿ•’ 2 days ago
Sentinel Blue๐Ÿ‘ฅ 11 - 50 employees๐Ÿข Information Technology And Services

The SOC Analyst II will lead the analysis, containment, and remediation of complex security threats while mentoring junior staff and driving improvements in incident response capabilities.

Incident ResponseWindows OS InternalsAttack Lifecycles & FrameworksThreat Intelligence Integration
Base

SOC Engineer

๐Ÿ•’ 8 days ago
Base๐Ÿ‘ฅ 201 - 500 employees๐Ÿข Computer Software

Monitorujesz i analizujesz zdarzenia bezpieczeล„stwa, reagujesz na incydenty oraz rozwijasz narzฤ™dzia i automatyzacje, ktรณre wzmacniajฤ… wykrywanie zagroลผeล„ i ochronฤ™ systemรณw.

SOCSecurity OperationsSecurity EngineeringSIEM

Trusted by Remote Workers