Offensive Security Researcher, Kernel & Embedded Security

What you'll do

• Conduct offensive security research on operating system kernels, boot ROMs, and firmware.
• Identify and exploit low-level vulnerabilities such as memory corruption and race conditions.
• Analyze the security of secure enclaves and other low-level hardware components.
• Develop custom security tools and fuzzing infrastructure to amplify research impact.
• Apply machine learning and AI techniques to automate and enhance security research.
• Perform reverse-engineering on embedded processors and DMA-capable peripherals.
• Evaluate and strengthen the most privileged layers of the product security architecture.

What we're looking for

• Proven experience in vulnerability research targeting operating system kernels, firmware, or embedded components.
• Strong understanding of low-level vulnerability classes and exploitation techniques like memory corruption, race conditions, and use-after-free.
• Ability to apply AI techniques and tools, such as LLMs or Machine Learning, for security research.
• Outstanding collaboration skills.
• Deep knowledge of kernel internals, including virtual memory management, system call interfaces, and driver frameworks (preferred).
• Experience with firmware and boot ROM security analysis, including secure boot chains and hardware trust anchors (preferred).
• Familiarity with embedded processors and coprocessors security (e.g., Secure Enclave, DMA-capable peripherals, baseband) (preferred).
• Fluency with tool development using programming languages such as C, C++, Python, Swift, or Objective-C (preferred).