Job description

The role of a Firmware Security Researcher is as diverse as it is essential, you will lead research and analysis in identifying vulnerabilities and trends across our platforms, invent new defensive technologies to eliminate entire classes of issues, and drive the delivery of security mitigations in collaboration with our partner engineering teams. A typical day in the role may include: * Evaluating security-critical aspects of our products, from system architecture to code review, from product features definition to circuit layout * Providing security focused consultations to partner teams on new features and technologies * Developing intelligent automated tools for security analysis, verification, and regression defence * Identifying threats and driving the development of mitigations to prevent them * Challenging existing mitigation techniques through evaluation and proof of concept exploitation * reverse engineering exploits, if necessary This position may require some travel to other Apple sites and vendors. Familiarity with firmware and embedded system technologies Experience with secure programming and code auditing Knowledge of modern anti-exploitation mitigations and their effectiveness Background in firmware or systems programming, ideally in C, C++, or another systems programming language Excellent communication skills Ideas and enthusiasm for using AI to fundamentally change the field of security engineering Proficiency with threat modelling complex systems Background in software exploitation Familiarity with operating system internals, especially macOS, iOS, or other flavours of UNIX Experience with memory safe programming languages and/or techniques

Requirements

Must-haves

A typical day in the role may include:
Evaluating security-critical aspects of our products, from system architecture to code review, from product features definition to circuit layout
Providing security focused consultations to partner teams on new features and technologies
Developing intelligent automated tools for security analysis, verification, and regression defence
Identifying threats and driving the development of mitigations to prevent them
Challenging existing mitigation techniques through evaluation and proof of concept exploitation
reverse engineering exploits, if necessary
This position may require some travel to other Apple sites and vendors.
Familiarity with firmware and embedded system technologies
Experience with secure programming and code auditing
Knowledge of modern anti-exploitation mitigations and their effectiveness
Background in firmware or systems programming, ideally in C, C++, or another systems programming language
Excellent communication skills
Ideas and enthusiasm for using AI to fundamentally change the field of security engineering
Proficiency with threat modelling complex systems
Background in software exploitation
Familiarity with operating system internals, especially macOS, iOS, or other flavours of UNIX
Experience with memory safe programming languages and/or techniques

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: apple
Effort: medium