Remote iOS Vulnerability Researcher

CENSUS SA; United States; A distancia; USD 120.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Birthday Paid Day off

Coffee, lunch and office snacks free

Private Medical and Life Insurance

Funded certifications & postgraduate

Recognition programs including a gift

Exposure to international teams

Opportunities for professional growth

Descripción de la vacante

CENSUS is seeking an iOS Vulnerability Researcher to join our security research team, focusing on vulnerability discovery and exploitation across the iOS userland.

You’ll spend your time reverse engineering proprietary Apple software, identifying security boundaries and interesting attack surfaces, developing fuzzers and instrumentation, and turning promising primitives into reliable vulnerability research.

Formación

• Hands-on vulnerability research, reverse engineering, exploitation research, or closely related security research experience.
• Strong understanding of C/C++ fundamentals, memory corruption, and common vulnerability classes.
• Solid ARM64/ARM64e assembly and calling-convention knowledge.
• Practical experience with reverse engineering using tools such as IDA Pro, Ghidra, Hopper, or Binary Ninja.
• Experience debugging with lldb.
• Experience performing crash analysis without a fully capable debugging environment.
• Experience with Frida, DTrace, custom instrumentation, or comparable dynamic-analysis tooling.
• Ability to write research tooling in Python and at least one systems language such as C, C++, Objective-C, Swift.
• Understanding of Objective-C & Swift runtime behavior and iOS process architecture.
• Familiarity with fuzzing methodologies and experience building or adapting fuzzing harnesses.
• Ability to reason about the exploitability of a vulnerability rather than stopping at crash discovery.
• Being able to adapt to scenarios where the complete technical picture is not present.

Responsabilidades

• Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e.
• Identify and investigate previously unknown vulnerabilities in iOS userland components.
• Analyze system daemons, XPC services, framework APIs, parsers, and other undocumented components of iOS/macOS.
• Develop targeted fuzzers and harnesses.
• Develop reliable proof-of-concepts and undocumented techniques in controlled research environments.
• Research the practical impact of modern mitigations including PAC, MTE/MIE, sandboxing, hardened runtime protections, and related platform defenses.
• Develop custom tooling for binary analysis, instrumentation, tracing, fuzzing, and vulnerability research.
• Collaborate with other researchers on projects.

Conocimientos

Vulnerability research

Reverse engineering

Exploitation research

C/C++ fundamentals

Memory corruption

ARM64 assembly

LLDB

Python scripting

Objective-C

Swift

IDAPRO / Ghidra / Hopper / Binary Nija

Herramientas

IDA Pro

Ghidra

Hopper

Binary Ninja

Descripción del empleo

CENSUS is seeking an iOS Vulnerability Researcher to join our security research team, focusing on vulnerability discovery and exploitation across the iOS userland.

You’ll spend your time reverse engineering proprietary Apple software, identifying security boundaries and interesting attack surfaces, developing fuzzers and instrumentation, and turning promising primitives into reliable vulnerability research.