QNX Senior Security Researcher

BlackBerry Inc.; Paris; Sur place; EUR 94 000 - 137 000; Plein temps

Avantages offerts par ce poste

VIP program

Benefits package

Résumé du poste

BlackBerry is expanding its security team and seeking experienced researchers to advance the safety of embedded software and automotive platforms. You will hunt for vulnerabilities, develop exploits, and drive automated testing alongside engineers in a fast-paced, research-focused environment.

In this role, you will design large-scale fuzzing campaigns, leverage AI-assisted techniques, and contribute to security tools that operate at massive scale across critical systems.

Qualifications

• Hands-on vulnerability research and offensive security experience.
• Experience with fuzzing frameworks (AFL, libFuzzer) and exploit development.
• Strong knowledge of memory management, processes, and embedded systems concepts.

Responsabilités

• Hunt for vulnerabilities across QNX products and embedded components.
• Perform penetration testing and offensive security assessments on embedded platforms.
• Design and run large-scale fuzzing campaigns to uncover memory corruption and logic flaws.
• Investigate crashes to determine exploitability and security impact.
• Collaborate with engineering teams to reproduce, triage, and remediate vulnerabilities.

Connaissances

Vulnerability research

Penetration testing

Exploit development

Security automation

AI/ML in security

Python

C/C++

Outils

AFL

libFuzzer

IDA Pro

Ghidra

Description du poste

Worker Sub-Type: Regular Job Description: QNX enhances the human experience and amplifies technology-driven industries, providing a trusted foundation for software-defined businesses to thrive. The business leads the way in delivering safe and secure operating systems, hypervisors, middleware, solutions, and development tools, along with support and services delivered by trusted embedded software experts. With a focus on reducing hardware dependency and increasing efficiency, QNX empowers organizations to unlock new possibilities in areas like high-performance computing at the edge, standards-based virtualization technologies, and cloud enablement. QNX® technology has been deployed in the world’s most critical embedded systems, including more than 275 million vehicles on the road today. QNX® software is trusted across industries including automotive, medical devices, industrial controls, robotics, commercial vehicles, rail, and aerospace and defense.

Are you the person we are looking for? We're expanding our Product Cybersecurity team and looking for passionate security researchers who love understanding how software fails, uncovering hidden vulnerabilities, and pushing offensive security techniques to the next level. If you're the type of person who can't resist digging deeper into a crash dump, writing custom fuzzing harnesses, reversing software to understand its inner workings, or using AI to uncover attack paths others miss, we'd love to talk to you.

What You'll Do:

• Hunt for vulnerabilities across QNX products and embedded software components before attackers find them
• Perform penetration testing and offensive security assessments against real-world embedded platforms
• Design, develop, and execute large-scale fuzzing campaigns to uncover memory corruption defects, logic flaws, and emerging vulnerability classes
• Investigate crashes and software defects to determine exploitability and security impact
• Conduct root-cause analysis and exploit development to understand and demonstrate real-world attack scenarios
• Leverage AI/ML-assisted techniques to accelerate vulnerability discovery and improve security analysis workflows
• Build and evolve automated security testing frameworks, fuzzers, scanners, and exploit validation pipelines
• Collaborate closely with engineering teams to reproduce, triage, and remediate vulnerabilities
• Contribute tools, methodologies, and research that strengthen our overall security posture
• Stay at the forefront of emerging threats and vulnerability research affecting modern embedded operating systems

What We're Looking For:

• Hands-on experience in vulnerability research, penetration testing, exploit development, or offensive security
• Practical experience with fuzzing frameworks such as AFL, libFuzzer, or similar technologies
• Strong understanding of low-level software internals including memory management, process isolation, POSIX APIs, concurrency, and embedded systems concepts
• Familiarity with common vulnerability classes such as: Use-after-free, Heap corruption, Buffer overflows, Race conditions, Privilege escalation, Logic vulnerabilities
• Strong programming skills in C, C++, and Python
• Experience developing automation and tooling for security testing or vulnerability discovery
• A passion for investigating complex systems and finding weaknesses others overlook
• The ability to independently drive research initiatives from concept through discovery and validation

Bonus Points If You Have:

• Experience applying AI or machine learning techniques to security research or vulnerability detection
• Knowledge of automotive cybersecurity, embedded systems, or QNX-based platforms
• Familiarity with ISO/SAE 21434 or secure software development practices
• Reverse engineering experience using tools such as IDA Pro, Ghidra, Binary Ninja, or similar frameworks
• Experience working with operating systems, kernels, drivers, or low-level system software

Why You’ll Love This Role:

• This is an opportunity to spend your time exploring, researching, breaking, and improving the security of software that runs some of the most important systems in the world.
• You’ll have the freedom to: Pursue challenging security research questions, Build new tools and automation frameworks, Experiment with emerging AI-assisted security techniques, Influence the security of products deployed at massive scale, Collaborate with world-class embedded engineers and security researchers, Turn curiosity into real-world impact

#LI-KH1

Scheduled Weekly Hours: 40

Compensation Hiring Base Salary Range: $108,750.00 - $158,750.00

Please be advised that the compensation hiring range indicated herein is provided solely as a good‑faith estimate of expected base compensation for the position. The actual compensation offered will be determined at the time of hire and is contingent upon multiple factors, including but not limited to the candidate’s qualifications, relevant experience, demonstrated skills, and results of assessments conducted during the hiring process.

Bonus: The BlackBerry Variable Incentive Pay (VIP) program is an organization-wide bonus incentive program which aims to reward full-time eligible employees for their contribution to BlackBerry’s success. VIP payments are made in addition to base salary and factor in company’s performance as a way for employees to share in BlackBerry’s achievements.

Benefits: The BlackBerry Employee Benefits programs offer a wide range of benefits that support your physical, financial and personal well-being. BlackBerry remains committed to offering affordable benefits including coverage for medical, dental, vision, life, disability insurance, retirement, employee share purchase program and paid‑time‑off to those that meet the eligibility requirements.

Disclosure of Position Status: This is an active opening. We are seeking to fill this position immediately

Disclosure of Artificial Intelligence: We do not use artificial intelligence (AI) to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed and evaluated by our hiring team.

BlackBerry provides enterprises and governments the intelligent software and services to power the world around us. Based in Waterloo, Ontario, BlackBerry’s high-performance foundational software enables major automakers and industrial giants alike to unlock transformative applications, drive new revenue streams and launch innovative business models, all without sacrificing safety, security or reliability. And with our deep heritage in Secure Communications, BlackBerry delivers operational resiliency with a comprehensive, highly secure and extensively certified portfolio for mobile fortification, mission-critical communications and critical event management.

©2026 BlackBerry. All right reserved. BlackBerry® and related trademarks, names, and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world.

It is the policy of BlackBerry to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, creed, religion, national origin, alienage or citizenship, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law.

EEO Minorities/Females/Protected Veteran/Disabled BlackBerry strives to create an accessible and inclusive application and selection process and is committed to working with and providing reasonable accommodation to job applicants who may require provisions to participate in the selection process.

Should you require an accommodation, please contact [e-mail] or contact our HR department by calling 1-519-888-7465. We will reply to your request as soon as possible.

FEDERAL POSTERS: Federal Employment Law Posters: Know Your Rights: Workplace Discrimination is Illegal Employee Polygraph Protection Act FMLA Federal Contractor Postings: E-Verify Right to Work Fair Labor Standards Act (FLSA) Minimum Wage