Vulnerability Researcher, SEAR

Lex; Lausanne; On-site; CHF 140,000 - 210,000; Full time

Job summary

Apple's Security Engineering & Architecture team seeks researchers to evaluate and exploit vulnerabilities across iOS, macOS, and firmware. You will analyze security architectures, perform vulnerability research on software, firmware, and hardware components, and report findings to improve defenses.

Candidates should have hands-on experience with vulnerability classes, exploitation techniques, and reverse-engineering tools, plus proficiency in C/C++/Python/Swift/Objective-C.

Qualifications

• Proven experience in vulnerability research and binary exploitation.
• Strong understanding of common vulnerability classes and exploitation techniques.
• Creative & effective problem-solving and analytical skills.
• Strong written and verbal communication skills.

Skills

Vulnerability research

Binary exploitation

Exploitation techniques

Problem solving

Communication skills

Tools

IDA Pro

Ghidra

Job description

Summary

Apple's Security Engineering & Architecture organization is responsible for the security of all Apple products. Passionate about safeguarding our users, we believe that the best defense requires a great offense. When it comes to securing more than a billion devices running the world's most sophisticated operating systems, that means finding vulnerabilities first. Can you make a difference on this scale? Join our extraordinary team of security researchers and help protect all Apple users.

Description

Our team is dedicated to safeguarding Apple products, encompassing everything from the microarchitecture to applications like Safari, Mail, and Messages. Our responsibilities include evaluating the security of iOS and macOS (kernel and user-land), boot ROMs, firmware, and hardware. By collaborating with a diverse range of teams and vendors, your influence will be felt across Apple’s products, including the iPhone, iPad, Mac, and Apple TV. As a team member, your primary role will involve conducting vulnerability research on Apple software, firmware, and hardware components. Analyzing and exploiting vulnerabilities is a crucial aspect of this position. This role demands individuals with robust technical skills and a genuine passion for securing systems by demonstrating their vulnerabilities. If you resonate with these qualities, we would be delighted to hear from you.

Minimum Qualifications

• Proven experience in vulnerability research and binary exploitation
• Excellent understanding of common vulnerability classes and exploitation techniques
• Creative & effective problem-solving and analytical skills
• Strong written and verbal communication skills

Preferred Qualifications

• Excellent knowledge of the security architecture of at least one complex operating system.
• Knowledge of macOS/iOS is nice-to-have, but not required.
• Experience with reverse-engineering tools (IDA Pro, Ghidra, etc.) and techniques
• Familiarity with tool development, using programming languages such as C, C++, Python, Swift, Objective-C

At Apple, we're not all the same. And that's our greatest strength. We draw on the differences in who we are, what we've experienced, and how we think. Because to create products that serve everyone, we believe in including everyone. Therefore, we are committed to treating all applicants fairly and equally. We will work with applicants to make any reasonable accommodations.

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Role Number: 200686097-5636