{"id":2130631,"url":"https://alion.io/job/apple-offensive-security-researcher-userland-kernel-security","title":"Offensive Security Researcher - Userland & Kernel Security","company":{"id":12,"name":"Apple","domain":"apple.com","url":"https://alion.io/company/apple","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Apple Jobs","truth_index":{"grade":"B","score":75,"open_postings":925,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":79000,"max_usd":157000,"period":"year","method":"role_country_seniority_unknown","sample_n":95},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Machine Learning","optional":false},{"name":"C++","optional":true},{"name":"Objective-C","optional":true},{"name":"Python","optional":true},{"name":"Swift","optional":true}],"status":"live","first_seen_at":"2026-10-07T11:49:14Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-11T19:23:20Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Apple's Security Engineering & Architecture organization keeps the users of over 2.35 billion active devices around the world safe. That mission is at the heart of everything we do, and our team approaches it from the offensive side by finding and helping eliminate vulnerabilities in one of the most sophisticated ecosystems ever built, before adversaries can exploit them.\nYou would be joining an extraordinary group of researchers who bring a range of backgrounds and perspectives to the work, and who are driven by curiosity, passion, and genuine engagement with what they do. If you think you can make a difference at this scale, join us in protecting all Apple users.\nDescription\nYou will join a team whose work spans vulnerability research, binary exploitation, security tooling development, fuzzing, machine learning, and much more. By harnessing state-of-the-art technologies, and developing new ones where they don't yet exist, we amplify our impact on the security of Apple products.\nIn this role, your primary focus will be on the userland software stack and the kernels of Apple platforms. You will conduct offensive security research across system services, apps, the kernel and drivers, hypervisors, or other components essential to the security of Apple users. You will work in cross-functional teams alongside other researchers and engineering teams to evaluate and strengthen every layer of our products.\nThis job is for individuals with outstanding technical skills, grit, and a genuine passion for breaking systems - so we can build them stronger.\nIf this is you, we'd love to hear from you.\nIn-office roles in Paris and other locations. Remote considered for experienced candidates.\nMinimum Qualifications\nProven track record in vulnerability research targeting operating systems for local privilege escalation (LPE), across both kernel and userland attack surfaces\nStrong understanding of vulnerability classes and exploitation techniques, such as memory corruption, race conditions, and use-after-free\nFluency in applying AI techniques and tools, such as LLMs and Machine Learning, to security research.\nPreferred Qualifications\nDeep knowledge of kernel internals, including virtual memory management, system call interfaces, and driver frameworks\nUnderstanding of state-of-the-art userland vulnerabilities and exploitation techniques\nFamiliarity with recent mitigations such as PAC or MTE\nFluency with tool development, using programming languages such as C, C++, Python, Swift, or Objective-C\nKnowledge of Apple operating systems like iOS or macOS is nice-to-have, but not required","description_format":"text","description_chars":2606,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Operating Systems","Smartwatches & Fitness Trackers","Tablets"],"lifecycle":[{"event":"open","at":"2026-10-09T00:54:32Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.695,"p_room":1,"age_days":2,"expected_fill_days":49,"reasons":["conf:2","stale_co","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/apple-offensive-security-researcher-userland-kernel-security","json_url":"https://alion.io/job/apple-offensive-security-researcher-userland-kernel-security.json","meta":{"generated_at":"2026-10-11T22:05:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11570,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12},"rest":"https://alion.io/mcp/rest/get_company?id=12"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapple-offensive-security-researcher-userland-kernel-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapple-offensive-security-researcher-userland-kernel-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapple-offensive-security-researcher-userland-kernel-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apple-offensive-security-researcher-userland-kernel-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapple-offensive-security-researcher-userland-kernel-security"}]}