Offensive Security Researcher, Kernel & Embedded Security

What you'll do

• Conduct offensive security research on operating system kernels, boot ROMs, and firmware.
• Identify and exploit low-level vulnerabilities such as memory corruption, race conditions, and use-after-free.
• Analyze secure enclaves and other low-level components to strengthen the core security architecture.
• Develop and utilize custom security tools using languages like C, C++, Python, Swift, or Objective-C.
• Perform reverse engineering on embedded systems and hardware trust anchors.
• Apply machine learning and AI techniques to enhance vulnerability research processes.
• Evaluate and harden the most privileged layers of Apple's product ecosystem.

What we're looking for

• Proven experience in vulnerability research targeting operating system kernels, firmware, or embedded components.
• Strong understanding of low-level vulnerability classes and exploitation techniques like memory corruption, race conditions, and use-after-free.
• Ability to apply AI techniques and tools, such as LLMs or Machine Learning, for security research.
• Outstanding collaboration skills.
• Deep knowledge of kernel internals including virtual memory management, system call interfaces, and driver frameworks.
• Experience with firmware and boot ROM security analysis, including secure boot chains and hardware trust anchors.
• Familiarity with embedded processors and coprocessors security such as Secure Enclave and DMA-capable peripherals.
• Fluency in tool development using programming languages like C, C++, Python, Swift, or Objective-C.