Self-paced Course
Offensive iOS Internals (On-demand)
In this unique course targeting the internals of the iOS operating system, you'll get a chance to explore various exploit mitigations, IPC mechanisms, and XNU internals. Develop skills in reverse-engineering iOS specific security features and gain a deeper understanding of exploitation techniques, including both userland and kernel-level exploits. Follow each stage of the jailbreak process, supported by case studies of real-world exploits.
This course is not an Appsec course, as it covers topics related to VR that is suitable for folks interested in learning more about the iOS operating system internals, exploitation techniques etc.
If you are interested in an Appsec course, check out the Practical Mobile Application Exploitation course.
This course is not an Appsec course, as it covers topics related to VR that is suitable for folks interested in learning more about the iOS operating system internals, exploitation techniques etc.
If you are interested in an Appsec course, check out the Practical Mobile Application Exploitation course.
-
Level
Beginner / Intermediate
-
Video
17 hours - 104 videos
(See syllabus) -
Estimated time of course completion:
3–5 months
-
CERTIFICATION EXAM
Included
A path to
CISR Certification
Key Objectives
- Introduction to ARM64 architecture
- Overview of the iOS Kernel and it’s Security Mitigations
- Reverse engineering iOS binaries (Apps and system binaries)
- Get an intro to common bug various bug categories on iOS
- Understand Memory allocation in Userland and Kernel
- Learn how Sandboxing and Code Signing works in iOS
- Get a deeper understanding of how Jailbreaks work
- Learn how to Reverse engineer proprietary security mitigations
- Learn using case Study of some real-world vulnerabilities including both Kernel bugs as well as bypass of Security mitigations
- Learn to exploit different iPC mechanisms (mach_msg2, XPC etc)
- Perform patch diffing on iOS updates to spot security-relevant code changes
- Extract and prepare binaries, then use key tools for analysis
- Become a Certified iOS Security Researcher (CISR)
Who Should Attend?
This course is specifically designed with the needs of modern iOS vulnerability researchers. This course will also be applicable for vulnerability researchers, penetration testers, mobile developers, or anyone keen to learn more about the iOS application security ecosystem.
Prerequisites
To successfully participate in this course, attendees should possess the following:
- Working knowledge of cybersecurity and pentesting fundamentals
- Basic working knowledge of iOS platform
- Basic Linux skills and command-line proficiency
- Understanding of fundamental programming concepts and looping structures in at least one higher-level language (Objective-C, Swift, C, C++, or similar)
- Basic ARM/AARCH64 binary assembly and exploitation knowledge is recommended, but not required
Course Update Log
Date: September 17, 2025
Update: Patch Diffing in iOS Module
Videos/Materials Included:
Introduction to patch diffing concepts
Extracting and preparing iOS binaries
Patch diffing tools and practical techniques
Real-world case studies:
CVE-2025-24201 — WebKit out-of-bounds read/write
CVE-2025-24203 — XNU page zeroing bug
CVE-2025-24200 — USB Restricted Mode bypass
CVE-2025-43200 — iMessage logical flaw
CVE-2025-31201 — RPAC PAC bypass
References for deeper further study
Date: December 23, 2025
Update: iOS Memory Protection and Security Model Updates
Videos/Materials Included:
Understanding Memory Integrity Enforcement (EMTE)
Address Sanitizer vs MIE
Finding the IRG/STG Instructions
Analyzing MIE Crash Logs
Checking Apps for MIE Implementation
Date: December, 2025
Update: Interactive Quizzes
Date: June, 2026
Update: Glossary and Homeworks Added Across All Modules
Update: CISR Mock Exam added
Accordion Title
Accordion Description
Duration
-
365 days of access after purchase
Technical Requirements
- Laptop with 8+ GB RAM and 40 GB hard disk space
- Administrative access on the system
- A physical jailbroken iOS device running iOS 16.x or later, or access to a virtualized environment such as Corellium, is required to complete the labs.
Need To Justify To Your Manager?
Need a Template to Justify the Training Request to your Manager? Download the Template below.
Syllabus
Unlock Job Opportunities
Gain the in-demand skills to pursue career opportunities such as:
Kernel Security Researcher*
A Tech Giant Company
$143,100 - $264,200 a year
Required Qualifications
- Background in kernel and low level systems technologies
- Background in secure coding and code auditing
- Knowledge of modern anti-exploitation mitigations and their effectiveness
- Programming background in C, C++, and Python
- Knowledge of macOS and iOS security architectures
Mobile Implant Software Engineer*
A Cyber-Risk Consulting Firm
$114,000 - $180,000 a year
Required Qualifications
- Proven experience in CNO and software development, particularly in support of DoD and Intelligence community customers
- Demonstrated ability to perform advanced research and development on embedded systems, Linux, and iOS platforms
- Strong understanding of network protocols and experience in implementing support for TCP, UDP, and TLS
iOS Vulnerability Engineer (Software)*
An IT Consulting Firm
$120,000 - $170,000 a year
Required Qualifications
- Strong knowledge of iOS internals
- Proficiency in reverse engineering tools
- Expertise in static and dynamic code analysis
- Familiarity with secure coding practices
- Proficiency in iOS development tools (e.g., Xcode)
- Ability to exploit and remediate vulnerabilities
- Knowledge of ARM assembly
*This is a compiled job description based on actual postings from LinkedIn and Indeed.
Included
CERTIFIED iOS SECURITY RESEARCHER (CISR)
This course prepares you for the Certified iOS Security Researcher (CISR) certification exam, a hands-on assessment specifically designed to test your grasp of advanced iOS security domains including userland and kernel components.
Exam Duration : 24 hours
START LEARNING
Offensive iOS Internals course
On-demand
-
Immediate access to materials
-
Lecture recordings and self-assessments
-
365 days of access
-
Certification of course completion
-
Certified iOS Security Researcher Exam attempt
-
Dedicated email support
Buy for someone else
Purchase the Offensive iOS Internals course and assign access to another learner. You can send it to a team member or purchase it as a gift.
The course will be delivered within one business day or on a scheduled date.
The assigned learner must register on the platform to access the course.
The course will be delivered within one business day or on a scheduled date.
The assigned learner must register on the platform to access the course.
Created by
8kSec Academy
Our instructors bring over a decade of hands-on experience in mobile security, IoT exploitation, and vulnerability assessment – expertise they now also apply to AI security and LLM exploitation. They've delivered numerous private trainings to high-profile clients and presented at renowned conferences such as Black Hat, DEF CON, POC, TyphoonCon, BruCON, Hack in Paris, PHDays, AppSec USA, and more.
With thousands of students having completed our courses, we continually refine our content based on real-world feedback. Whether through live sessions or on-demand courses, we ensure the same high-quality learning experience is accessible to professionals worldwide.
At 8kSec, we Empower businesses with Cutting-Edge Mobile Security Training, Pioneering Vulnerability research, and Innovative product offerings
Copyright © 2026
FEATURED LINKS
POLICIES
CONNECT WITH US
-
Twitter
-
LinkedIn
Live Trainings list:
Lead Application Penetration Tester*
A Cybersecurity Testing & Consulting Firm
$150,000 - $180,000 a year
Required Qualifications & Skills
- Bachelor’s degree in Computer Science, Software Engineering, or related field, or equivalent job experience
- Thorough security testing of developer workflows and mobile applications (iPhone and Android), including identification of security issues and vulnerabilities
- Proficiency in multiple programming languages and understanding of secure coding practices
- In-depth source code reviews to identify security flaws or weaknesses that could be exploited in software applications
- Detailed assessments and compilation of findings into reports for further review and action
- Experience with tools like Burp Suite Pro, Checkmarx, Corellium, Synopsys, Acunetix, VeraCode, SAST & DAST Tools, Plextrac, Cloud security (AWS / Azure / Oracle), Postman, SmartBear ReadyAPI, SoapUI, and Hashicorp Vault
Key Responsibilities
- Team Leadership: Lead and mentor penetration testers, ensuring high-quality security assessments
- Mobile & DevOps Security: Conduct security testing of mobile apps (iOS/Android) and integrate security into DevOps pipelines
- Code & Penetration Testing: Perform source code reviews and comprehensive web/mobile penetration testing
- Reporting & Collaboration: Document findings in detailed reports and collaborate with development teams for remediation
- Offensive Security: Execute red team exercises and offensive security operations
- Security Strategy: Develop and implement security testing strategies and best practices
- Global Collaboration: Work with global teams to secure applications
- Automation: Automate security testing within CI/CD pipelines
iOS Application Security Engineer*
A Cyber-Risk Consulting Firm
$150,000 - $200,000 a year
Required Qualifications & Skills
- Bachelor’s degree in Computer Science, Information Security, or a related field, or 5+ years in mobile application development
- Proficiency in iOS frameworks (UIKit, Core Data) and Android frameworks
- In-depth knowledge of mobile security vulnerabilities (OWASP Mobile Top 10) and remediation techniques
- Familiarity with mobile security testing tools (e.g., MobSF, Drozer, Burp Suite, OWASP ZAP)
- Extensive experience in iOS application development using Swift/Objective-C, ideally also knowledge of Android (Java/Kotlin) security
- Strong understanding of cryptography principles, secure data storage, and key management
- Experience with mobile reverse engineering tools such as Frida
- Knowledge of App Store and Google Play Store compliance requirements
- Familiarity with advanced encryption techniques and secure app distribution
- Proficiency in iOS frameworks (UIKit, Core Data) and Android frameworks
- In-depth knowledge of mobile security vulnerabilities (OWASP Mobile Top 10) and remediation techniques
- Familiarity with mobile security testing tools (e.g., MobSF, Drozer, Burp Suite, OWASP ZAP)
- Extensive experience in iOS application development using Swift/Objective-C, ideally also knowledge of Android (Java/Kotlin) security
- Strong understanding of cryptography principles, secure data storage, and key management
- Experience with mobile reverse engineering tools such as Frida
- Knowledge of App Store and Google Play Store compliance requirements
- Familiarity with advanced encryption techniques and secure app distribution
Key Responsibilities
- Secure Mobile Development: Implement secure coding practices (Swift/Objective-C, Kotlin/Java) and ensure secure data handling
- Security Architecture & Threat Modeling: Design secure architectures, perform threat modeling, and ensure compliance (OWASP, PCI DSS, NIST)
- Code Reviews & Auditing: Conduct code reviews, participate in security audits, and perform SAST/DAST
- Vulnerability Management & Penetration Testing: Manage vulnerabilities, conduct penetration tests, and analyze threats
- Security Architecture & Threat Modeling: Design secure architectures, perform threat modeling, and ensure compliance (OWASP, PCI DSS, NIST)
- Code Reviews & Auditing: Conduct code reviews, participate in security audits, and perform SAST/DAST
- Vulnerability Management & Penetration Testing: Manage vulnerabilities, conduct penetration tests, and analyze threats
- API Security & Compliance: Secure API integrations and ensure compliance with app store guidelines
- Collaboration & Incident Response: Collaborate with teams and respond to security incidents
Specialist, Offensive Android Security*
A Tech Giant Company
$151,200 - $207,500 a year
Required Qualifications & Skills
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent combination of education training and experience
- Proficiency in tools for kernel debugging, fuzzing, and penetration testing
- Experience with reverse engineering tools (e.g., IDA Pro & Ghidra), debugging tools (e.g., JTAG/SWD)
- 5+ years of experience in system-level penetration testing and vulnerability research
- Strong knowledge of low-level programming languages such as C and Assembly
- Proficiency in tools for kernel debugging, fuzzing, and penetration testing
- Experience with reverse engineering tools (e.g., IDA Pro & Ghidra), debugging tools (e.g., JTAG/SWD)
- 5+ years of experience in system-level penetration testing and vulnerability research
- Strong knowledge of low-level programming languages such as C and Assembly
Key Responsibilities
- Identify trends in kernel and device driver attacks and conduct in-depth research on emerging threats
- Conduct reverse engineering and Secure OS architecture analysis
Develop automated vulnerability discovery and analysis tools, such as fuzzing tools
- Perform penetration testing on OS components, including TEE, bootloader, and kernel
- Research and test the latest exploit trends, developing Proof of Concept attacks and advanced exploits (0-day, 1-day)
- Conduct in-depth root cause analysis to understand and mitigate system vulnerabilities
Kernel Security Researcher*
A Tech Giant Company
$143,100 - $264,200 a year
Required Qualifications & Skills
- Background in kernel and low level systems technologies
- Background in secure coding and code auditing
- Knowledge of modern anti-exploitation mitigations and their effectiveness
- Programming background in C, C++, and Python
Preferred Qualifications:
- Knowledge of macOS and iOS security architectures
- Background in secure coding and code auditing
- Knowledge of modern anti-exploitation mitigations and their effectiveness
- Programming background in C, C++, and Python
Preferred Qualifications:
- Knowledge of macOS and iOS security architectures
- Experience of software exploitation
- Knowledge of memory safe languages
- Proficiency with assembly languages, particularly ARM64, is a big plus
Key Responsibilities
Your responsibilities will include enhancing the security of our products to make them the most secure in the industry, evaluating security-critical code, developing intelligent automated tools for vulnerability detection, building exploits to test mitigation techniques, providing security-focused consultations on key technologies to partner teams, and driving the design and development of new mitigation strategies. This position may require some travel to our other sites, vendors, and security conferences.
Mobile Reverse Engineer*
An IT Services Firm
$88,200 - $195,200 a year
Required Qualifications & Skills
- Bachelor’s degree
- 5+ yrs experience in mobile software reverse engineering
- Experience with Windows, Linux, Android, OS X, and iOS operating system & architecture
- Experience in computer or cell phone architecture, system internals, operating systems, and/or boot process software engineering
Experience with static analysis tools such as IDA Pro, Ghidra and Binary Ninja
- Experience with debugging tools such as WinDbg
- Experience with virtualization, sandboxing, and emulation tools like VMware, KVM, QEMU and others
- Working knowledge of programming languages such as C, C++, .NET, Python, Java, etc.
- Experience debugging mobile application memory and performance issues
Preferred:
- Experience requiring a deep knowledge of Android and a strong passion in mobile industry and mobile development
- Experience developing/designing mobile phone platforms highly desired
- Experience in wireless API's (Wi-Fi, Bluetooth) preferred
- Engineer software scripts in C, C++, and Java with emphasis on prototyping and API extraction
- 5+ yrs experience in mobile software reverse engineering
- Experience with Windows, Linux, Android, OS X, and iOS operating system & architecture
- Experience in computer or cell phone architecture, system internals, operating systems, and/or boot process software engineering
Experience with static analysis tools such as IDA Pro, Ghidra and Binary Ninja
- Experience with debugging tools such as WinDbg
- Experience with virtualization, sandboxing, and emulation tools like VMware, KVM, QEMU and others
- Working knowledge of programming languages such as C, C++, .NET, Python, Java, etc.
- Experience debugging mobile application memory and performance issues
Preferred:
- Experience requiring a deep knowledge of Android and a strong passion in mobile industry and mobile development
- Experience developing/designing mobile phone platforms highly desired
- Experience in wireless API's (Wi-Fi, Bluetooth) preferred
- Engineer software scripts in C, C++, and Java with emphasis on prototyping and API extraction
Key Responsibilities
- Provide malicious code reverse engineering to isolate, review, analyze, and reverse-engineer potentially malicious programs recovered from compromised computer systems and networks
- Research new trends, techniques, and packaging of malicious software to stay current and ready to identify and handle zero-day exploits
- Research behavior of binaries and share detailed understanding of how apps behave at memory/register level in support of technical exploitation operations
- Support efforts to design, prototype, document, test, conduct exploitation automation and transition code analysis methods and tools specific to technical exploitation operations
- Research new trends, techniques, and packaging of malicious software to stay current and ready to identify and handle zero-day exploits
- Research behavior of binaries and share detailed understanding of how apps behave at memory/register level in support of technical exploitation operations
- Support efforts to design, prototype, document, test, conduct exploitation automation and transition code analysis methods and tools specific to technical exploitation operations
Senior Lead Security Engineer - Mobile*
A Global Banking Corporation
$147,700 - $190,000 a year
Required Qualifications & Skills
- Formal training or certification on Mobile Development concepts and 5+ years applied experience
- Strong understanding of mobile application security risks and mitigation strategies for both Android and iOS platforms
- Experience in implementing or managing mobile security operations
- Familiarity with CI/CD pipelines, DevSecOps methodologies, and secure software development practices
- Ability to collaborate with development teams on security functions & resolutions
- Hands-on practical experience delivering enterprise level cybersecurity solutions and controls
- Strong collaboration and communication skills are essential for working effectively with teams on security implementations
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for future state architecture & enterprise integrations
- Proven experience leading projects from scoping to delivery
- Strong understanding of mobile application security risks and mitigation strategies for both Android and iOS platforms
- Experience in implementing or managing mobile security operations
- Familiarity with CI/CD pipelines, DevSecOps methodologies, and secure software development practices
- Ability to collaborate with development teams on security functions & resolutions
- Hands-on practical experience delivering enterprise level cybersecurity solutions and controls
- Strong collaboration and communication skills are essential for working effectively with teams on security implementations
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for future state architecture & enterprise integrations
- Proven experience leading projects from scoping to delivery
Key Responsibilities
- Working closely with in-house mobile development teams, providing guidance on secure coding practices, threat mitigation strategies, and optimal use of mobile security solutions.
- Utilize our mobile security vendors and tools to drive proactive security measures, ensuring optimal configuration, monitoring, and maintenance to safeguard our mobile applications.
- Oversee the deployment, integration, and ongoing support of mobile security tools, ensuring they are effectively utilized and updated.
- Provide technical leadership in securing mobile applications and infrastructure, ensuring compliance with industry standards and best practices.
- Manage the lifecycle of mobile security tools, including planning and executing upgrades to maintain optimal performance and security.
- Work closely with cross-functional teams to enhance security awareness, provide training, and ensure adherence to security protocols. Additionally, serve as a key feedback conduit to the mobile binary scanning team, risk management, and source scanning teams, ensuring continuous improvements in security posture and alignment with organizational security strategies.
- Utilize our mobile security vendors and tools to drive proactive security measures, ensuring optimal configuration, monitoring, and maintenance to safeguard our mobile applications.
- Oversee the deployment, integration, and ongoing support of mobile security tools, ensuring they are effectively utilized and updated.
- Provide technical leadership in securing mobile applications and infrastructure, ensuring compliance with industry standards and best practices.
- Manage the lifecycle of mobile security tools, including planning and executing upgrades to maintain optimal performance and security.
- Work closely with cross-functional teams to enhance security awareness, provide training, and ensure adherence to security protocols. Additionally, serve as a key feedback conduit to the mobile binary scanning team, risk management, and source scanning teams, ensuring continuous improvements in security posture and alignment with organizational security strategies.
Reverse Engineer - Android*
A Cybersecurity Firm
$90,000 - $120,000 a year
Required Qualifications & Skills
- Associate's, Bachelor's, or Master's degree in Computer Science or a related discipline (preferred)
- 3-5 years of hands-on experience with Android and reverse engineering
- In-depth understanding of Android internals and the ability to read, comprehend, and analyze source code software
- Familiarity with reverse engineering tools such as Jadx, Ghidra, Frida, IDA Pro, and Burp to perform binary and APK analysis
- 3-5 years of hands-on experience with Android and reverse engineering
- In-depth understanding of Android internals and the ability to read, comprehend, and analyze source code software
- Familiarity with reverse engineering tools such as Jadx, Ghidra, Frida, IDA Pro, and Burp to perform binary and APK analysis
Key Responsibilities
As a dedicated and collaborative Android Malware Reverse Engineer, you will conduct reverse engineering, security assessments, and code reviews. You will also conduct and assist with complex decompilation, unpacking, code review, and malicious mobile software reviews. The goal of the work is to identify families of malware and act on apps at scale.
To give you an idea of how this Reverse Engineer Malware Analysis - Android role would look and feel, here are some things you could expect to do:
- Review malicious applications and SDKs by analyzing, unpacking, and reverse engineering software that compromises Android devices
- Review security policy violations, vulnerabilities, or improper coding practices
- Research threats like APT using Open-Source Intelligence (Virus Total, Web, ExploitDB, MITRE, etc.)
To give you an idea of how this Reverse Engineer Malware Analysis - Android role would look and feel, here are some things you could expect to do:
- Review malicious applications and SDKs by analyzing, unpacking, and reverse engineering software that compromises Android devices
- Review security policy violations, vulnerabilities, or improper coding practices
- Research threats like APT using Open-Source Intelligence (Virus Total, Web, ExploitDB, MITRE, etc.)
Android Mobile Reverse Engineer*
An IT Consulting Firm
$100,000 - $150,000 a year
Required Qualifications & Skills
- Proficiency in Android app development
- Expertise in reverse engineering tools
- Knowledge of Android internals
- Strong debugging and analysis skills
- Familiarity with encryption and obfuscation techniques
- Ability to work with disassemblers and debuggers
Desired Qualifications:
- Experience with Android emulator tools
- Familiarity with mobile penetration testing
- Experience with static and dynamic analysis tools
- Knowledge of security exploits in mobile apps
- Ability to develop custom reverse engineering scripts
- Strong communication and reporting abilities
- Expertise in reverse engineering tools
- Knowledge of Android internals
- Strong debugging and analysis skills
- Familiarity with encryption and obfuscation techniques
- Ability to work with disassemblers and debuggers
Desired Qualifications:
- Experience with Android emulator tools
- Familiarity with mobile penetration testing
- Experience with static and dynamic analysis tools
- Knowledge of security exploits in mobile apps
- Ability to develop custom reverse engineering scripts
- Strong communication and reporting abilities
Key Responsibilities
- Analyze Android applications for vulnerabilities
- Deconstruct mobile application code
- Identify and mitigate security risks
- Reverse engineer mobile app binaries
- Conduct security audits on Android systems
- Document findings and create reports
- Deconstruct mobile application code
- Identify and mitigate security risks
- Reverse engineer mobile app binaries
- Conduct security audits on Android systems
- Document findings and create reports
Mobile Implant Software Engineer*
A Cyber-Risk Consulting Firm
$114,000 - $180,000 a year
Required Qualifications & Skills
- Proven experience in CNO and software development, particularly in support of DoD and Intelligence community customers
- Demonstrated ability to perform advanced research and development on embedded systems, Linux, and iOS platforms
- Strong understanding of network protocols and experience in implementing support for TCP, UDP, and TLS
- Experience in designing, developing, and integrating modular cyber capabilities
- Proficiency in using and integrating CI/CD tools and practices
- Excellent problem-solving skills and the ability to design novel solutions to complex security challenges
- Strong leadership skills with the ability to guide and mentor development teams
- Programming Languages: C, C++, Python, Java, x86 Assembly, MIPS Assembly, Microblaze Assembly, ARM Assembly, ARM64 Assembly, VHDL, Verilog, XML, JSON, HTML
- Tools and Technologies: LLDB/LLVM, IDA Pro, Immunity Debugger, Immunity Canvas, Eclipse, Git, Subversion, Embedded Systems, FPGAs, Docker, Intel Performance Primitives (IPP), High Performance Computing (HPC), REDHAWK, OmniORB CORBA, Software Defined Radios (SDR), Signal Processing, MySQL, PostgreSQL, JDBC, Django, ActiveMQ, Jpype, Pyxb, STOMP
- Demonstrated ability to perform advanced research and development on embedded systems, Linux, and iOS platforms
- Strong understanding of network protocols and experience in implementing support for TCP, UDP, and TLS
- Experience in designing, developing, and integrating modular cyber capabilities
- Proficiency in using and integrating CI/CD tools and practices
- Excellent problem-solving skills and the ability to design novel solutions to complex security challenges
- Strong leadership skills with the ability to guide and mentor development teams
- Programming Languages: C, C++, Python, Java, x86 Assembly, MIPS Assembly, Microblaze Assembly, ARM Assembly, ARM64 Assembly, VHDL, Verilog, XML, JSON, HTML
- Tools and Technologies: LLDB/LLVM, IDA Pro, Immunity Debugger, Immunity Canvas, Eclipse, Git, Subversion, Embedded Systems, FPGAs, Docker, Intel Performance Primitives (IPP), High Performance Computing (HPC), REDHAWK, OmniORB CORBA, Software Defined Radios (SDR), Signal Processing, MySQL, PostgreSQL, JDBC, Django, ActiveMQ, Jpype, Pyxb, STOMP
Key Responsibilities
- Lead research and development projects focused on mobile vulnerabilities and cyber operations
- Design and implement innovative solutions to address operational security challenges
- Architect and develop flexible, modular cyber capabilities in C, C++, and Python
- Triage and analyze public software vulnerabilities (CVEs) for security concerns
- Provide technical support and custom solutions to high-priority customer needs
- Design and develop new client/server data distribution tools
- Implement support for multiple network protocols, including TCP, UDP, and TLS
- Create custom build systems and ensure portability using Docker
- Integrate new projects with CI/CD services to streamline development processes
- Generate and maintain unit tests to enhance the reliability of client/server applications
- Guide the development team in adhering to industry software engineering standards and best practices
- Design and implement innovative solutions to address operational security challenges
- Architect and develop flexible, modular cyber capabilities in C, C++, and Python
- Triage and analyze public software vulnerabilities (CVEs) for security concerns
- Provide technical support and custom solutions to high-priority customer needs
- Design and develop new client/server data distribution tools
- Implement support for multiple network protocols, including TCP, UDP, and TLS
- Create custom build systems and ensure portability using Docker
- Integrate new projects with CI/CD services to streamline development processes
- Generate and maintain unit tests to enhance the reliability of client/server applications
- Guide the development team in adhering to industry software engineering standards and best practices
iOS Vulnerability Engineer (Software)*
An IT Consulting Firm
$120,000 - $170,000 a year
Required Qualifications & Skills
- Strong knowledge of iOS internals
- Proficiency in reverse engineering tools
- Expertise in static and dynamic code analysis
- Familiarity with secure coding practices
- Proficiency in iOS development tools (e.g., Xcode)
- Ability to exploit and remediate vulnerabilities
Desired skills:
- Knowledge of ARM assembly
- Experience with fuzz testing methodologies
- Familiarity with jailbreak development
- Understanding of malware analysis techniques
- Expertise in cryptographic protocols
- Proficiency in scripting for automation (e.g., Python)
- Proficiency in reverse engineering tools
- Expertise in static and dynamic code analysis
- Familiarity with secure coding practices
- Proficiency in iOS development tools (e.g., Xcode)
- Ability to exploit and remediate vulnerabilities
Desired skills:
- Knowledge of ARM assembly
- Experience with fuzz testing methodologies
- Familiarity with jailbreak development
- Understanding of malware analysis techniques
- Expertise in cryptographic protocols
- Proficiency in scripting for automation (e.g., Python)
Key Responsibilities
- Identify and analyze iOS vulnerabilities
- Develop mitigation strategies for discovered issues
- Conduct security assessments of iOS applications
- Perform reverse engineering of iOS binaries
- Collaborate with development teams to improve software security
- Document findings and recommend improvements
- Develop mitigation strategies for discovered issues
- Conduct security assessments of iOS applications
- Perform reverse engineering of iOS binaries
- Collaborate with development teams to improve software security
- Document findings and recommend improvements
Android Security Engineer*
An IT Consulting and Services Firm
$115,000 - $165,000 a year
Required Qualifications & Skills
- Reverse Engineering Fundamentals:
- Static Analysis - decompilation, dissasembly, code auditing
- Dynamic Analysis - debugging monitoring, fuzzing
- Sample Tools - IDA Pro, Ghidra, Radare2, Jadx, Fernflower, Smali, Baksmalu, ADB, JDWP, Android studio, bluestack, Frida, Wireshark, Cyberchef. HTTP interception, Yara, Snort
- Programming (Java/Kotlin, Scripting, Javascript, Encode/Decode, encryption and decryption)
- Android fundamentals (permissions, Manifest, Entry points, Broadcast receivers, exported activities, services, subclasses, Dalvik/ART Virtual machine)
- Static Analysis - decompilation, dissasembly, code auditing
- Dynamic Analysis - debugging monitoring, fuzzing
- Sample Tools - IDA Pro, Ghidra, Radare2, Jadx, Fernflower, Smali, Baksmalu, ADB, JDWP, Android studio, bluestack, Frida, Wireshark, Cyberchef. HTTP interception, Yara, Snort
- Programming (Java/Kotlin, Scripting, Javascript, Encode/Decode, encryption and decryption)
- Android fundamentals (permissions, Manifest, Entry points, Broadcast receivers, exported activities, services, subclasses, Dalvik/ART Virtual machine)
Key Responsibilities
- Reverse engineering and assessing risk and user harm from potentially harmful applications
- Conducting static and dynamic analysis
- Providing assessment and evidence to support findings
- Assessing detection and analysis gaps as well as scalable enforcement through detection rules
- Conducting static and dynamic analysis
- Providing assessment and evidence to support findings
- Assessing detection and analysis gaps as well as scalable enforcement through detection rules
Information Security Engineer (Android)*
A Large Online Media Provider
$197,000 - $291,000 a year
Required Qualifications & Skills
- Bachelor's degree or equivalent practical experience
- 8 years of experience with security assessments or security design reviews or threat modeling
- 8 years of coding experience in one or more general purpose languages
Preferred qualifications:
- Knowledge in programming languages, compilers, static and dynamic analysis techniques
- Experience in Mobile App Development and Android Apps
- Experience implementing sand-boxing infrastructure or low-level systems features and building static analysis tools, linters or compilers
- Experience with open source
- 8 years of experience with security assessments or security design reviews or threat modeling
- 8 years of coding experience in one or more general purpose languages
Preferred qualifications:
- Knowledge in programming languages, compilers, static and dynamic analysis techniques
- Experience in Mobile App Development and Android Apps
- Experience implementing sand-boxing infrastructure or low-level systems features and building static analysis tools, linters or compilers
- Experience with open source
Key Responsibilities
- Perform Android security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
- Review and develop secure operational practices, and provide security guidance for engineers and support staff
- Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements
- Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis
- Respond to vulnerabilities with repos, mitigations, and hardening. Surface vulnerability patterns and design them out.
- Review and develop secure operational practices, and provide security guidance for engineers and support staff
- Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements
- Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis
- Respond to vulnerabilities with repos, mitigations, and hardening. Surface vulnerability patterns and design them out.
Sr. Android Penetration Tester*
A Gobal Device Company
$130,000 - $166,000 a year
Required Qualifications & Skills
- 5+ years of penetration testing experience, including 2+ years of Android penetration testing and 1+ year of web application penetration testing
- Strong understanding of malware, phishing attacks, attack vectors, and security best practices
- Knowledge of penetration testing tools, threat modeling, and security frameworks
- Ability to conduct security research, CVE analysis, and adversary simulation
- Strong communication skills to work cross-functionally with engineering and security teams
- Experience working in corporate environments with internal penetration testing teams (preferred over agency-based consulting experience)
- Bachelor’s degree in either Cybersecurity, Computer Science, Information Security, or related field
Preferred Qualifications:
- Certifications in offensive security
- Published CVEs, blog posts, or walkthroughs on security research
- Malware development and reverse engineering experience
- Experience working in top security consulting firms or in-house red teams at major tech companies
- Hands-on experience with firmware penetration testing and IoT security.
- Strong understanding of malware, phishing attacks, attack vectors, and security best practices
- Knowledge of penetration testing tools, threat modeling, and security frameworks
- Ability to conduct security research, CVE analysis, and adversary simulation
- Strong communication skills to work cross-functionally with engineering and security teams
- Experience working in corporate environments with internal penetration testing teams (preferred over agency-based consulting experience)
- Bachelor’s degree in either Cybersecurity, Computer Science, Information Security, or related field
Preferred Qualifications:
- Certifications in offensive security
- Published CVEs, blog posts, or walkthroughs on security research
- Malware development and reverse engineering experience
- Experience working in top security consulting firms or in-house red teams at major tech companies
- Hands-on experience with firmware penetration testing and IoT security.
Key Responsibilities
- Develop expertise in our product solutions, deep diving into design/architecture, & execute white box and black box penetration scenarios
- Plan, scope and conduct vulnerability assessment/ Penetration test on internal / external facing public assets such as Web application, Android platform, Android Apps, Backend APIs, and Cloud services
- Research & and conduct adversary simulation for known security threats and identify novel attack vectors to test a system’s relative security readiness
- Conduct Threat modelling, Threat Intelligence and scoping with stakeholders
- Assist in creating and maintaining internal penetration testing and practice within QA team, managing vulnerabilities and tracking until closure
- Build Test harness & required Automation suites and validate attack vectors in Threat Lab
- Co-ordinate with program management, security architects at Internal & offshore sites
- Stays up to date on current tools, technologies, and vulnerabilities to incorporate into testing practices
- Research and developing exploits for zero-day vulnerabilities
- Conduct penetration test on IOT and Firmware Devices
- Plan, scope and conduct vulnerability assessment/ Penetration test on internal / external facing public assets such as Web application, Android platform, Android Apps, Backend APIs, and Cloud services
- Research & and conduct adversary simulation for known security threats and identify novel attack vectors to test a system’s relative security readiness
- Conduct Threat modelling, Threat Intelligence and scoping with stakeholders
- Assist in creating and maintaining internal penetration testing and practice within QA team, managing vulnerabilities and tracking until closure
- Build Test harness & required Automation suites and validate attack vectors in Threat Lab
- Co-ordinate with program management, security architects at Internal & offshore sites
- Stays up to date on current tools, technologies, and vulnerabilities to incorporate into testing practices
- Research and developing exploits for zero-day vulnerabilities
- Conduct penetration test on IOT and Firmware Devices
iOS Application Security Engineer*
A Cybersecurity Testing & Consulting Firm
$125,000 - $175,000 a year
Required Qualifications & Skills
- Bachelor’s degree in Computer Science, Information Security, or a related field, or 5+ years in mobile application development
- Extensive experience in iOS application development using Swift/Objective-C
- In-depth knowledge of mobile security vulnerabilities (OWASP Mobile Top 10) and remediation techniques
- Proficiency in iOS frameworks (UIKit, Core Data) and Android frameworks
- Familiarity with mobile security testing tools (e.g., MobSF, Drozer, Burp Suite, OWASP ZAP)
- Strong understanding of cryptography principles, secure data storage, and key management
Preferred Qualifications:
- Relevant security certifications
- Experience with mobile reverse engineering tools such as Frida
- Knowledge of App Store and Google Play Store compliance requirements
- Familiarity with advanced encryption techniques and secure app distribution
Key Responsibilities
- Secure Code Development (iOS & Android)
- Security Architecture & Threat Modeling
- Code Reviews & Security Auditing
- Mobile Vulnerability Management
- Penetration Testing & Threat Analysis
- Secure Data Handling & API Security
- Policy Development & Compliance
- Collaboration & Incident Response
iOS Engineer - Product Security*
A Tech Giant Company
$143,100 - $264,200 a year
Required Qualifications & Skills
- 2+ years of iOS app development experience in Swift and/or Objective-C
- Experience and/or strong interest in security/secure programming, digital signatures and PKI
- User interface programming experience with SwiftUI and/or UIKit
- Understanding of computer science fundamentals
- Able to thrive in a reciprocal environment and clearly communicate across teams
Preferred Qualifications:
- Self-motivated, critical, and detail oriented
- Strong debugging and analytical skills
- Familiar with the ISO 18013-5 standard is a plus
- Experience developing software with any of the following frameworks is a plus: ID Verifier API , Verify with Wallet API
- BS or MS in Computer Science, related technical field or equivalent experience
AI Security Engineer*
A Tech Giant Company
$136,000 – $212,800 a year
Required Qualifications
- Bachelor’s degree in Computer Science or a related field
- 2+ years of combined experience in areas such as threat modeling, secure coding practices, identity and access management, authentication, cryptography, or network security
- Familiarity with GenAI technologies and related security risks, along with mitigation strategies such as penetration testing and exploit development (or equivalent expertise)
- 2+ years of programming experience in languages like Python, Ruby, Go, Swift, Java, .NET, C++, or another object-oriented language
- 2+ years of programming experience in languages like Python, Ruby, Go, Swift, Java, .NET, C++, or another object-oriented language
Key Responsibilities
- Build, refine, and maintain threat models across diverse software initiatives
- Conduct both automated and manual code reviews, focusing on Java, Python, and JavaScript
- Design and implement automation tools to enhance AI security
- Deliver AI security training sessions and provide guidance to internal development teams
- Offer architectural and design recommendations with an AI security focus
- Deliver AI security training sessions and provide guidance to internal development teams
- Offer architectural and design recommendations with an AI security focus
- Tackle complex AI security challenges using creative and innovative approaches
- Shape processes, priorities, and decision-making within your team and with partners to drive stronger security outcomes
- Shape processes, priorities, and decision-making within your team and with partners to drive stronger security outcomes
Offensive AI Security Tester*
IT Services Provider Firm
$114,400 – $124,800 per year
Required Qualifications
- 5+ years of relevant professional experience
- Practical expertise in adversarial testing of GenAI systems (e.g., jailbreaks, prompt injections, input–output evaluations, data exfiltration) and delivering actionable mitigation steps
- Solid understanding of ML/GenAI concepts (LLMs, embeddings, diffusion models) and adversarial ML techniques (such as model extraction, data poisoning, and prompt manipulation)
- Background in cybersecurity red teaming or penetration testing, with strong skills in Python and scripting for automation and test framework development
- Knowledge of AI security standards and frameworks, including NIST AI RMF, MITRE ATLAS, or OWASP LLM Top 10
- Experience with AI/MLOps tools and enterprise integrations (Azure AI, AWS SageMaker, OpenAI API, Hugging Face, LangChain, or similar platforms)
- Solid understanding of ML/GenAI concepts (LLMs, embeddings, diffusion models) and adversarial ML techniques (such as model extraction, data poisoning, and prompt manipulation)
- Background in cybersecurity red teaming or penetration testing, with strong skills in Python and scripting for automation and test framework development
- Knowledge of AI security standards and frameworks, including NIST AI RMF, MITRE ATLAS, or OWASP LLM Top 10
- Experience with AI/MLOps tools and enterprise integrations (Azure AI, AWS SageMaker, OpenAI API, Hugging Face, LangChain, or similar platforms)
Nice-to-Haves:
- Familiarity with AI governance and risk management (model risk assessment, compliance, and policy considerations)
- Experience integrating AI with SIEM/SOAR platforms and threat intelligence monitoring
- Background in creating reusable adversarial testing assets, scripts, and automated workflows
- Experience integrating AI with SIEM/SOAR platforms and threat intelligence monitoring
- Background in creating reusable adversarial testing assets, scripts, and automated workflows
Adversarial Prompt Expert*
IT Services Provider Firm
Up to $80 per hour, part time
Required Qualifications & Skills
- Extensive hands-on experience with LLMs, both open- and closed-source, and comfort experimenting across different platforms
- Strong background in prompt engineering and jailbreak techniques, including evasion strategies and innovative approaches to bypassing model safeguards
- Adversarial and security-oriented mindset, with additional value placed on red teaming or offensive security experience
- Creativity and persistence, with the ability to explore edge cases and iterate through multiple variations
- Strong documentation skills to record tests, track outcomes, and communicate findings clearly
- Solid ethical judgment, with an understanding of boundaries and responsible handling of sensitive material
- Creativity and persistence, with the ability to explore edge cases and iterate through multiple variations
- Strong documentation skills to record tests, track outcomes, and communicate findings clearly
- Solid ethical judgment, with an understanding of boundaries and responsible handling of sensitive material
Researcher, Automated Red Teaming*
A Frontier AI Research Company
$295,000 - $445,000 a year
Required Qualifications
- Hands-on experience with LLMs and agents, including multi-turn behaviors, tool use, and the ways models adapt to constraints
- Strong applied research instincts, especially around evaluations — designing experiments that are reproducible, interpretable, and hard to fool
- Ability to build scalable automation, not just prototypes — turning red-teaming ideas into pipelines that run continuously and produce high-signal outputs
- Solid software engineering fundamentals (data structures, algorithms, testing discipline) and the ability to work in a production-adjacent environment
- Thinking in threat models and incentives — naturally asking "what would an attacker do next?" and "how would this fail under pressure?"
- Ability to translate messy findings into action, communicating clearly with researchers, engineers, product, and policy teams
- Experience in adversarial ML, security research / red teaming, abuse prevention systems, or large-scale evaluation infrastructure
Key Responsibilities
- Own the research and technical direction for automated red teaming — building scalable, research-driven systems that continuously uncover failure modes in frontier models and their safeguards
- Drive automated classifier jailbreak discovery across high-risk threat areas
- Probe chain-of-thought monitoring evasion and adjacent loss-of-control evaluations
- Partner with vertical risk teams to define threat models, prioritize targets, and land mitigations
- Work with classifier teams to turn discovered attacks into training data, evaluations, and measurable robustness gains
- Translate red-teaming findings into actionable, production-facing improvements
Staff Attack Engineer, AI/LLM*
A Cybersecurity Product Company
$223,000 - $275,000 a year
Required Qualifications
- Advanced proficiency in Python and software development principles
- Familiarity with AI/LLM security frameworks
- Experience on a security product or offensive security team, ideally with shipped offensive capabilities or tooling
- Demonstrated track record of compromising AI/LLM and agent-based systems
- Clear understanding of trust boundaries around AI tools, data sources, and permissions, and how to systematically test and exploit them
- Solid penetration testing fundamentals and understanding of common attack chains
Preferred:
- Experience with cloud AI services (e.g., Azure OpenAI, GCP Vertex AI, AWS Bedrock)
- Contributions to AI security research (blog posts, conference talks, CVEs, open-source tools)
- Background in traditional exploit development or vulnerability research
CTF experience, particularly in AI/ML-focused challenge categories
Key Responsibilities
- Identify vulnerabilities in AI and agentic systems, converting research into automated, scalable attack modules for an autonomous pentesting platform
- Develop and deploy prompt injection and evasion techniques, emphasizing the creation of universal, reusable templates
- Conduct tool-use exploitation, abusing LLM agents' access to code, file systems, APIs, and databases for attacker-realistic outcomes (e.g., context poisoning, RCE, data exfiltration, privilege escalation)
- Target AI infrastructure (model serving, training pipelines, vector databases, GPU/MLOps tooling) with an understanding of real-world enterprise deployments and misconfigurations
- Research and apply model and supply chain attacks (poisoning, training data extraction, adversarial inputs, deployment pipeline abuse)
- Perform threat modeling for agentic systems, mapping trust boundaries and attack surfaces into concrete attack paths
- Build and extend LLM-powered applications and agentic workflows with production concerns in mind (cost, guardrails, reliability, observability)
Principal Security Architect (AI/LLM)*
A Financial Services Company
$110,000 - $180,000 a year
Required Qualifications
- 7+ years of relevant experience, or an equivalent combination of education and experience
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience
- 5+ years of experience in security architecture, with significant exposure to AI/ML systems and cloud environments
- Experience with Model Context Protocol (MCP) and securing the infrastructure that supports it
Preferred:
- Deep knowledge of network security, data security, cloud security (AWS, Azure, GCP), and IAM principles
- Proven experience conducting security reviews, threat modeling, and vendor/technology evaluations
- Strong understanding of financial industry regulatory frameworks (e.g., FFIEC, PCI DSS, SOX) and cybersecurity frameworks (e.g., NIST, CIS)
- Relevant certifications (e.g., CISSP, CCSP, cloud security certifications) are highly desirable
Key Responsibilities
- Lead the design, implementation, and governance of security architectures for AI-driven systems and platforms
- Lead comprehensive security reviews of AI systems, applications, and infrastructure to identify and mitigate risks
- Conduct threat modeling for AI and machine learning solutions, ensuring robust protection against adversarial attacks and data breaches
- Establish and promote secure architecture patterns, frameworks, and guidelines for AI development and deployment
- Develop and maintain security roadmaps for AI initiatives, aligned with business objectives and regulatory requirements
- Evaluate vendors and emerging technologies for security posture and alignment with organizational standards
- Collaborate with engineering, data science, product, and compliance teams to embed security throughout the AI lifecycle