Offensive Security Researcher Wireless Security

Apples Security Engineering u0026 Architecture organization is responsible for the security of all Apple products. Protecting our users is at the heart of everything we build and our team takes an offensive approach to that mission by uncovering and fixing vulnerabilities impacting one of the worlds most sophisticated ecosystems before adversaries can ever exploit them all at the scale of more than one billion you make a difference on this scale Join our extraordinary team of security researchers and help protect all Apple users

We engage in various activities including vulnerability research binary exploitation security tooling development fuzzing machine learning and many more. By developing and harnessing state-of-the-art technologies we amplify our impact on Apples product this role your primary focus will be on the wireless attack surface of Apple platforms. You will conduct offensive security research across cellular/baseband Wi-Fi and Bluetooth stacks as well as other wireless protocols such as Thread NFC and UWB spanning radio firmware protocol state machines and the host software that drives them. These radios are reachable over the air and represent some of the most impactful proximity- and remote-triggerable attack surfaces on our devices. You will work in cross-functional teams alongside other researchers and engineering teams to identify and help eliminate vulnerabilities before they can be exploited. Knowledge of Apple operating systems such as iOS or macOS is a plus but not job is for individuals with outstanding technical skills grit and a genuine passion for breaking systems so we can build them this is you wed love to hear from -office roles in Paris Cupertino and other locations. Remote considered for experienced candidates.

Proven experience in vulnerability research targeting wireless technologies such as cellular/baseband Wi-Fi or BluetoothnStrong understanding of vulnerability classes and exploitation techniques relevant to wireless protocol stacks and radio firmware such as memory corruption parsing and state-machine flaws cryptographic and authentication weaknesses and protocol downgrade or logic attacksnAbility to apply AI techniques and tools such as LLMs or Machine Learning for security research activities

Deep knowledge of cellular technologies and 3GPP standards (2G/3G/4G/5G) baseband processors and modem firmware internalsnExperience analyzing protocol stacks including their firmware host-controller interfaces and over-the-air protocol behaviour of wireless technologies like Wi-Fi (802.11) and Bluetooth/BLE or other short-range protocols like Thread NFC or UWBnFamiliarity with binary reverse-engineering using tools like IDA and Ghidra as well as the practical RF and over-the-air toolset such as software-defined radio (SDR) and other equipment for capturing and injecting wireless signals