Offensive Security Researcher - iOS

Epsilon; Paris; Hybride; EUR 70 000 - 120 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Relocation support

Wellness programs

Meal and transportation allowances

Résumé du poste

Epsilon Security in Paris is seeking highly skilled vulnerability researchers focused on Android and remote attack surfaces. You will explore vulnerability classes, perform reverse engineering, and contribute to end-to-end security solutions in a collaborative, international team.

This role offers in-office work in Paris with opportunities for remote consideration for experienced candidates; relocation support and comprehensive benefits are provided.

Qualifications

• Experience in reverse engineering with tools such as IDA Pro and Ghidra.
• Proven vulnerability research on iOS/MacOS devices (Apple Silicon).
• Strong understanding of remote attack surface vulnerabilities (memory corruption, logic errors, type confusion).
• Good grasp of iOS design and components.
• Fluent in English with strong writing skills.

Responsabilités

• Conduct vulnerability research focusing on Android and remote attack surfaces.
• Develop security tooling, fuzzing, and exploitation techniques as part of a research team.
• Collaborate with colleagues to build end-to-end security solutions for mobile platforms and networks.
• Explore research areas such as messaging apps, media frameworks, baseband, and native OS components.

Connaissances

Reverse engineering

Vulnerability research

Team collaboration

English writing

Outils

IDA Pro

Ghidra

Description du poste

Summary

Epsilon Security is a research lab seeking high-end vulnerabilities on mobile platforms, browsers and is tailored to provide initial access into systems.

Role Description

Our team engages in various activities like vulnerability research, binary exploitation, security tooling development, fuzzing, machine learning, and much more. This role is primarily focused on Android and its derivatives. You will cover all its remote attack surface and can be led conducting research on messaging application, media frameworks, baseband, native OS components or any other network-reachable components. Everyone has its own speciality. You will work in a team-work environment to help build end-to-end solutions.

This job is for individuals with great technical skills and a relentless passion to tackle genuinely hard problems.

In-office roles in Paris, Barcelona. Remote is considered for experienced candidates.

Minimum Qualifications

• Experience in reverse engineering and tools such as IDA Pro, Ghidra


• Proven experience in vulnerability research on iOS/MacOS devices (AppleSilicon)


• Strong understanding of common vulnerability classes and exploitation techniques relevant to remote attack surfaces, such as memory corruption, logic errors, and type confusion etc.


• Great understanding of iOS overall design and components


• Great collaboration skill


• Fluent in english and great writing skills

Preferred Qualifications

• Experience in auditing messaging applications, media parsing libraries, or other network-facing protocols attack surfaces


• Ability to apply AI techniques and tools, such as LLMs or Machine Learning, for security research


• Familiarity with greybox fuzzing
  
• Tool development and familiarity with Objective-C, Swift

What We Offer

We offer a highly technical and international environment with regular meetups and an annual team retreat. Compensation includes healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

At Epsilon everyone is different with its set of skills and knowledge. That's our strength. As a small company we move fast and we are willing to find any profile with both technical skills and a sense of common good to help build and grow the company. Every individual counts in Epsilon, can it be you ?