Zimperium - Detection Researcher/Security Engineer (iOS Focused)
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• Proven ability to collaborate effectively within a team environment, including forming and leading focused sub-groups to deliver specific project features or research objectives. • Strong knowledge of iOS operating system internals (e.g., sandboxing, code-signing), with a particular focus on runtime application security mechanisms and techniques for detecting system tampering and device compromise. • Proficiency in reverse engineering using tools such as IDA Pro, Ghidra, Hopper, or equivalent, including experience writing scripts, leveraging their SDKs, and isolating and reporting technical issues. • Demonstrated ability to think both offensively and defensively, approaching analysis tasks with the mindset of both an attacker and a defender. • Solid programming experience in C, Python, Objective-C and Swift, with the ability to produce efficient, maintainable, and secure code. • Good understanding of ARM64 assembly to develop really task specific and time critical functions. • Experience in data analysis methods applied to the forensics investigations is considered a plus. • Proficiency with debugging and dynamic binary instrumentation tools (e.g., LLDB, Frida, Objection, QBDI). • Capability to reverse engineer proprietary protocols and interprocess communication mechanisms (e.g., XPC, mach messages, IOKit). • Practical knowledge of jailbreak methods and iOS exploit classes (e.g., kernel exploits, sandbox escapes, code-signing bypasses), ideally experience in analyzing such exploits or exploit chains is a big plus.
Responsibilities
• Research and analyze advanced detection bypass techniques (e.g., jailbreaking, hooking, and runtime application/system tampering) to assess threats to our detection systems. • Evaluate and reverse-engineer tools and frameworks used to attack or evade our products, documenting findings and attack vectors. • Lead and participate in structured brainstorming sessions to generate novel detection ideas and countermeasures. • Design, prototype, and implement new detection techniques and algorithms for the iOS platform. • Develop, maintain, and improve internal tooling and automation to accelerate analysis, triage, and detection development. • Review and interpret forensic data provided by customers, produce clear technical reports, and provide actionable guidance and remediation support. • Perform and contribute to internal penetration testing and adversary emulation of newly introduced security features to validate effectiveness. • Write and publish technical blog posts to raise awareness of emerging security risks and share insights with customers and the wider security community.
No credit card. Takes 10 seconds.