iOS Researcher

iOS Researcher

Apply for the iOS Researcher role at iVerify.

About iVerify

iVerify is a mobile threat hunting company that protects mobile devices like any other corporate endpoint. We aim to bring together security and privacy to defend against modern mobile threats, especially for high‑risk users such as journalists and activists.

About The Role

We are hiring a Senior iOS Researcher to lead deep technical investigations into iOS exploitation. Your work will involve triaging crash reports, reverse engineering binaries, developing exploit proofs‑of‑concept, and translating findings into actionable detection insights.

Key Responsibilities

• Conduct deep research into iOS internals—system daemons, security mechanisms, sandboxing, frameworks, and kernel functionality—to uncover how iOS operates.
• Investigate crash reports and diagnostic data to perform root‑cause analysis and identify vulnerable code paths.
• Develop controlled proof‑of‑concept exploits to demonstrate known vulnerabilities and validate potential exploits.
• Reverse engineer key system and userland binaries to understand behavior, privilege boundaries, and potential misuse.
• Translate research findings into detection heuristics or engineering requirements to strengthen our detection pipeline.
• Create lightweight tools, scripts, or harnesses (Python or Swift) to accelerate reversing, fuzzing, and vulnerability research.
• Collaborate with research, machine‑learning, and product teams to ensure research outputs are reproducible and production‑ready; document methodologies and findings clearly.

Requirements

• 5+ years of experience in security research, reverse engineering, or vulnerability discovery with a strong focus on iOS/macOS internals.
• Deep practical knowledge of iOS internals—including dyld, kernel vs userland boundaries, sandbox, entitlements, code signing, kernel mitigations, and system daemons.
• Experience with exploit development, crash engineering, or fuzzing; deterministic crash harness experience on 0‑Click / 1‑Click attack surfaces is a plus.
• Strong C/C++ and Objective‑C/Swift familiarity, able to read and reason about compiled code and runtime behaviors.
• Comfortable developing tooling and script automation in Python or equivalent.
• Experience triaging crashes and working with Apple diagnostics and symbolication.
• Familiarity with ARM64 assembly and Apple’s extensions.
• Proven reversing skills (IDA Pro, Ghidra, or Binary Ninja) and low‑level debugging experience (lldb, Frida).
• Strong understanding of secure coding principles and mitigation techniques.
• Excellent technical writing skills, able to produce reproducible research notes, CVE‑style reports, and triage artifacts.
• Strong collaboration skills with cross‑functional engineering, data, and product teams.

Compensation

Salary ranges are determined by role, level, location, and employment type. The range displayed reflects the minimum and maximum target for new hires; individual pay is determined by factors such as location, experience, and education.

Diversity, Equity, and Inclusion

iVerify is committed to building a diverse, equitable, and inclusive workplace. We believe diversity drives innovation and fosters creativity, and we strive to create an environment where everyone feels valued, respected, and empowered to bring their authentic selves to work.