Vulnerability Researcher

Vulnerability Researcher Job Title: Mobile Vulnerability Researcher We are seeking a highly skilled and motivated Vulnerability Researcher with a strong focus on the Apple iPhone or Google Android ecosystem. The ideal candidate will possess a deep understanding of iOS/Android architecture, security mechanisms, and common vulnerability classes. This role demands a proactive and meticulous approach to identifying and analyzing security weaknesses within iOS, Android, and related technologies. As a member of our team, you will be expected to contribute significantly to our research efforts and stay at the forefront of mobile security advancements. Day-to-day responsibilities and duties include: Conduct in-depth vulnerability research and analysis on Apple iOS, Google Android, and related software and hardware. Employ various vulnerability discovery techniques, including static analysis, dynamic analysis, and reverse engineering of binaries, protocols, and file formats. Design, develop, and execute effective fuzzing strategies to uncover security vulnerabilities in iOS and Android components and applications. Perform various methods of fuzzing to identify potential security flaws in web-based elements within the iOS and Android environments. Analyze and understand Arm Assembly language to facilitate low-level vulnerability analysis and exploitation. Document discovered vulnerabilities with clear, concise, and actionable reports, including technical details, impact assessments, and potential remediation strategies. Collaborate closely with development teams to communicate findings and assist in the development and implementation of security patches and mitigations. Stay abreast of the latest security trends, research, and attack vectors targeting the iOS and Android platforms. Contribute to the development of internal security tools and methodologies. Potentially present research findings to both technical and non-technical audiences. Mentor and provide guidance to junior vulnerability research team members. Requirements: Must be able to qualify for and maintain security clearance. Have at least 3 years of vulnerability research and iOS experience and a good understanding of professional business environments. Experience with Ghidra, IDA Pro, or other disassemblers, Frida. Be able to carry themselves in a professional manner. Be punctual, responsible, and reliable. Preferred: Good written and verbal communication skills (answering the phone and composing emails in a professional manner). Programming/Scripting experience. Knowledge of mobile platform (Android/iOS) internals and kernel. Mobile/Embedded knowledge, baseband knowledge, SoC (MTK, Qualcomm, Exynos) knowledge. Job Type: Full-time Schedule: The schedule for this position is project driven and can be highly variable depending on project deadlines and the specific needs of the software development teams. Monday to Friday Pay: From $131,000 per year excluding bonus and benefits. #J-18808-Ljbffr