Назад
Company hidden
6 дней назад

iOS Vulnerability Researcher (Cybersecurity)

Формат работы
remote (только USA)
Тип работы
fulltime
Английский
b2
Страна
UK/US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

iOS Vulnerability Researcher (Cybersecurity): Conducting research on iOS and embedded devices to develop unique capabilities for lawful evidence extraction with an accent on hardware-backed encryption and secure boot chains. Focus on overcoming state-of-the-art exploit mitigations like PAC, KTRR, and PPL to execute native payloads.

Location: Remote (USA)

Company

hirify.global provides AI-powered digital investigation and forensic solutions to public safety organizations and intelligence agencies globally to accelerate justice.

What you will do

  • Research unexplored vulnerabilities in iOS and other embedded devices.
  • Develop world-unique capabilities for evidence extraction from mobile platforms.
  • Analyze and bypass hardware-backed encryption (SiDP), secure crypto coprocessors (SEP), and secure boot chains.
  • Develop exploits to overcome modern mitigations such as PAC, KTRR, and PPL.
  • Collaborate with a team of researchers to solve complex digital intelligence challenges.

Requirements

  • Proven vulnerability research experience, preferably focusing on iOS.
  • Expertise in advanced exploitation techniques.
  • Strong proficiency in ARM reverse engineering.
  • Understanding of cryptographic primitives and potential weaknesses.
  • Must be based in the USA.

Nice to have

  • Experience with hardware research and board design.

Culture & Benefits

  • Opportunity to work with top-notch technology and a team of passionate researchers.
  • Direct impact on public safety by assisting law enforcement in closing cases.
  • Mission-driven environment focused on protecting and saving lives.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →