Senior iOS Security Researcher

Senior iOS Security Researcher at Operation Zero. Remote, salary from 1M RUB. Research iOS kernel, reverse engineering, exploit development.

Responsibilities: • Perform tasks set by the team, including iOS kernel research, reverse engineering of closed-source components, debugging smartphones, checking existing vulnerabilities and proof-of-concepts for exploitability, writing working exploits, chaining exploits. • Participate in testing of ready exploits, modify and update them when new software versions are released. • Propose ideas to the team and participate in discussions on new developments and research.

Requirements: • Ability to quickly learn, analyze large volumes of disparate information and synthesize them into concrete knowledge, systematic thinking. • Ability to work and make decisions under limited information, no fear of hypothesizing, testing them, discarding non-working ideas. • Ability to focus on tasks that require long time to solve, up to several months. Ability to stay productive and not give up when the task seems impossible. • Proven experience in writing exploits or finding critical vulnerabilities (remote code execution, privilege escalation, sandbox escape, bypassing protection mechanisms — RCE, LPE, SBX, mitigation bypasses) in iOS over the past year. • Understanding of XNU architecture and internals: Mach, BSD, IOKit, threading, scheduling, memory management, IPC, kernel extensions (kext), kernel modules, DriverKit. • Proficiency in programming languages and tools: ARM and AArch64 assembly, C, C++, Objective-C, IDA Pro, Ghidra, Hopper, LLDB, lldbinit, Frida, Clang/LLVM, Xcode. • Experience debugging iPhone and MacBook devices: JTAG, ktrace, sysdiagnose; ability to analyze crash dumps and kernel panics and identify the cause of the error. • Experience studying and using jailbreaks and Coruna and DarkSword chains in practice. • Knowledge of modern iOS protection mechanisms: KPP, KTRR, PAC, PPL, SPTM, SEP, code signing, AMFI, keychain, etc. • Ability to configure and use LLMs to automate research tasks. • Advantage: experience writing kernel-mode drivers for macOS, experience in vulnerability research, knowledge of Swift. • English at the level of reading technical documentation.

Salary: from 1 million RUB. Remote work.