About this project
it-programming / mobile-development
Open
We are seeking an experienced iOS reverse engineer to join our team on a part-time basis. This role involves participating in cutting-edge mobile security research and defense. The successful candidate will deeply analyze complex iOS vulnerability exploitation techniques, including but not limited to browser engine vulnerabilities, kernel privilege escalation, and persistence mechanisms. The primary goal is to enhance the security of our products and protect users from advanced threats. This position requires a deep understanding of iOS internal mechanisms and practical skills in identifying, analyzing, and mitigating zero-day vulnerability attack chains. Requirements include extensive experience in reverse engineering iOS applications and system components, familiarity with ARM64 assembly language, and a deep understanding of iOS security architecture, sandbox mechanisms, PAC (Pointer Authentication Codes), and KPP (Kernel Patch Protection). Candidates must have practical experience in analyzing and exploiting browser engine (e.g., WebKit/Javascriptcore) vulnerabilities and kernel vulnerabilities (e.g., cow/vfs race conditions). Familiarity with multi-stage attack chain concepts, from initial infection to persistence and data theft, is essential. Programming skills in Objective-C/Swift, C/C++, and the ability to write security tools and Proof of Concept (PoC) are required. Proficiency in reverse engineering tools such as IDA Pro, Ghidra, and Hopper Disassembler, as well as dynamic analysis tools like Frida and Cycript, is also necessary. This is a remote part-time position with flexible hours, requiring regular online communication and collaboration with the team.
Category IT & Programming
Subcategory Apps programming. Android, iOS and others
What is the scope of the project? Create a new app
Project duration Not specified
Skills needed