[Hiring] iOS Vulnerability Researcher @CENSUS SA

Role Description

CENSUS is looking for an iOS Vulnerability Researcher to join our security research team, focused on vulnerability discovery and exploitation across the iOS userland attack surface. You'll spend your time reverse engineering proprietary Apple software, identifying security boundaries and interesting attack surfaces, developing fuzzers and instrumentation, and turning promising primitives into reliable vulnerability research. This is a hands-on research role for someone who enjoys working close to the metal, understands Apple's ecosystem and is comfortable operating without complete documentation.

Responsibilities

• Reverse engineer iOS binaries and system frameworks on ARM64/ARM64e.
• Identify and investigate previously unknown vulnerabilities in iOS userland components.
• Analyze system daemons, XPC services, framework APIs, parsers, and other undocumented components of the iOS/macOS system.
• Develop targeted fuzzers and harnesses.
• Develop reliable proof-of-concepts and undocumented techniques in controlled research environments.
• Research the practical impact of modern mitigations including PAC, MTE/MIE, sandboxing, hardened runtime protections, and related platform defenses.
• Develop custom tooling for binary analysis, instrumentation, tracing, fuzzing, and vulnerability research.
• Collaborate with other researchers on projects.

Technical Requirements

• Hands-on vulnerability research, reverse engineering, exploitation research, or closely related security research experience.
• Strong understanding of C/C++ fundamentals, memory corruption, and common vulnerability classes.
• Solid ARM64/ARM64e assembly and calling-convention knowledge.
• Practical experience with reverse engineering using tools such as IDA Pro, Ghidra, Hopper, or Binary Ninja.
• Experience debugging with lldb.
• Experience performing crash analysis without a fully capable debugging environment.
• Experience with Frida, DTrace, custom instrumentation, or comparable dynamic-analysis tooling.
• Ability to write research tooling in Python and at least one systems language such as C, C++, Objective-C, Swift.
• Understanding of Objective-C & Swift runtime behavior and iOS process architecture.
• Familiarity with fuzzing methodologies and experience building or adapting fuzzing harnesses.
• Ability to reason about the exploitability of a vulnerability rather than stopping at crash discovery.
• Being able to adapt to scenarios where the complete technical picture is not present.

Preferred Experience

• Previous iOS or macOS vulnerability research.
• Public vulnerability disclosures, CVEs, security advisories, conference talks, or substantial private research experience.
• Familiarity with arm64e Apple specific internals.
• Familiarity with modern iOS exploitation mitigations.
• Familiarity with jailbreak-era or modern iOS research tooling is useful, but not required.
• Experience adapting research techniques between iOS releases and dealing with undocumented platform changes.
• Experience with reversing Objective-C binaries.
• Experience with iOS/macOS IPC mechanisms, such as mach messages, MIG, and XPC.

Benefits

• The chance to be part of a fast-growing, global cybersecurity company.
• A collaborative, purpose-driven team with a strong learning mindset.
• Competitive salary and benefits, such as but not limited to:
• Birthday Paid Day off.
• Coffee, lunch and office snacks free of charge.
• Private Medical and Life Insurance covering employees & family members.
• Funded certifications & postgraduate programs.
• Recognition programs including welcome gift, new year celebration gift, referral bonus and long service vouchers.
• Exposure to international teams, leaders, and challenges.
• Opportunities for professional growth, development, innovation, and more!