The role of a Firmware Security Researcher is as diverse as it is essential, you will lead research and analysis in identifying vulnerabilities and trends across our platforms, invent new defensive technologies to eliminate entire classes of issues, and drive the delivery of security mitigations in collaboration with our partner engineering teams.
A typical day in the role may include:
* Evaluating security-critical aspects of our products, from system architecture to code review, from product features definition to circuit layout
* Providing security focused consultations to partner teams on new features and technologies
* Developing intelligent automated tools for security analysis, verification, and regression defence
* Identifying threats and driving the development of mitigations to prevent them
* Challenging existing mitigation techniques through evaluation and proof of concept exploitation
* reverse engineering exploits, if necessary
This position may require some travel to other Apple sites and vendors.
Minimum Qualifications
Familiarity with firmware and embedded system technologies
Experience with secure programming and code auditing
Knowledge of modern anti-exploitation mitigations and their effectiveness
Background in firmware or systems programming, ideally in C, C++, or another systems programming language
Excellent communication skills
Preferred Qualifications
Ideas and enthusiasm for using AI to fundamentally change the field of security engineering
Proficiency with threat modelling complex systems
Background in software exploitation
Familiarity with operating system internals, especially macOS, iOS, or other flavours of UNIX
Experience with memory safe programming languages and/or techniques