Vacancies

Responsibilities

• Carry out tasks assigned to the team, including the research of the Android kernel, the reverse-engineering of closed-source components, the debugging of smartphones, the verification of existing vulnerabilities and proof-of-concepts for exploitability, the writing of fully functional exploits, and the chaining of exploits.
• Participate in the testing process of finished exploits, modify and update them as new software versions are released.
• Offer insights to the team and participate in discussions on new developments and research.

Key Requirements

• Ability to be a quick learner, to analyse large volumes of disparate information and synthesise them into specific knowledge, mastery of systems thinking.
• Ability to work and make decisions in the context of limited available information, lack of fear in setting hypotheses, testing them and rejecting unworkable ideas.
• Ability to focus on time-consuming tasks requiring up to several months to complete. The ability to maintain productivity and keep going even when a task seems impossible.

Requirements

• Proven track record of writing exploits for critical vulnerabilities (remote code execution, privilege escalation, sandbox escape — RCE, LPE, SBX, mitigation bypasses) in the iOS kernel over the last year.
• Understanding of the architecture and internals of XNU: Mach, BSD, IOKit, threading, scheduling, memory management, IPC, kernel extensions (kext), kernel modules, DriverKit.
• Proficiency in technical tools such as ARM and AArch64 assembly language, C, C++, Objective-C, IDA Pro, Ghidra, Hopper, LLDB, lldbinit, Frida, Clang/LLVM, Xcode.
• iPhone and MacBook debugging skills: JTAG, ktrace, sysdiagnose, crash dumps, kernel panics.
• Experience of researching jailbreaks and exploit chains like Coruna and DarkSword.
• Knowledge of currently relevant iOS mitigations: MIE, KPP, KTRR, PAC, PPL, SPTM, SEP, code signing, AMFI, keychain, etc.
• Ability to configure and use LLM for solving research problems and for automatic code generation of proof-of-concepts and working exploits.
• Will be your advantage: experience of writing macOS kernel mode drivers, skills of finding vulnerabilities, and knowledge of Swift.
• English proficiency on the level of reading technical documentation and communicating with the team.

What We Offer

• Salary range is $144,000 – $240,000 annually.
• Bonuses for each exploit developed.
• Fully remote work and flexible schedule.
• Professional development and career growth opportunities in one of the most technically challenging areas of information security.

Responsibilities

• Carry out tasks assigned to the team, including the research of one of modern browsers, the verification of existing vulnerabilities and proof-of-concepts for exploitability, the writing of fully functional exploits, and the chaining of exploits.
• Participate in the testing process of finished exploits, modify and update them as new software versions are released.
• Offer insights to the team and participate in discussions on new developments and research.

Key Requirements

• Ability to be a quick learner, to analyse large volumes of disparate information and synthesise them into specific knowledge, mastery of systems thinking.
• Ability to work and make decisions in the context of limited available information, lack of fear in setting hypotheses, testing them and rejecting unworkable ideas.
• Ability to focus on time-consuming tasks requiring up to several months to complete. The ability to maintain productivity and keep going even when a task seems impossible.

Requirements

• Proven track record of writing exploits for critical vulnerabilities (remote code execution, privilege escalation, mitigation bypass) in one of the popular browsers (Chrome, Safari, Firefox, Samsung Internet, Edge) over the last year.
• Understanding of the architecture and internals of the modern browsers, skills of working with one of the JavaScript engines (V8, WebKit, SpiderMonkey), JIT, DOM, WebAssembly, CSP, CORS.
• Knowledge of currently relevant vulnerability classes and mitigations such as PAC, JITCage, V8 Sandbox.
• Proficiency in technical tools such as C/C++, JavaScript, WASM, GDB, LLDB, WinDbg.
• Ability to configure and use LLM for solving research problems and for automatic code generation of proof-of-concepts and working exploits.
• Will be your advantage: ability to search for browser vulnerabilities, knowledge of Java and Objective-C languages, experience with exploitation of WebGL and ANGLE, experience with Frida, Valgrind, Angr, presence of published research on browser exploitation.
• English proficiency on the level of reading technical documentation and communicating with the team.

What We Offer

• Salary range is $144,000 – $240,000 annually.
• Bonuses for each exploit developed.
• Fully remote work and flexible schedule.
• Professional development and career growth opportunities in one of the most technically challenging areas of information security.