{"id":15821,"url":"https://alion.io/job/zimperium-detection-researchersecurity-engineer-ios-focused","title":"Detection Researcher/Security Engineer (iOS Focused)","company":{"id":2907,"name":"Zimperium","domain":"zimperium.com","url":"https://alion.io/company/zimperium","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":95,"open_postings":15,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":140,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Mobile","role_family":"Mobile","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Riga, Latvia","Germany","France","United Kingdom","Argentina","Hungary","Italy","Netherlands","Romania","Spain"],"countries":["LV","DE","FR","GB","AR","HU","IT","NL","RO","ES"],"hiring_countries":["ES","DE","FR","GB","AT","BE","BG","HR","CZ","DK","FI","HU","IE","IT","NL","NO","PL","RO","SE","CH","EE","GR","IS","LV","LI","LT","LU","MT","PT","SK","SI","AR"],"hiring_countries_total":32,"salary":null,"salary_estimate":{"min_usd":43000,"max_usd":119000,"period":"year","method":"role_country_seniority_unknown","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"Objective-C","optional":false},{"name":"Python","optional":false},{"name":"Swift","optional":false}],"status":"live","first_seen_at":"2026-01-26T00:51:13Z","employer_posted_date":"2026-01-26","last_verified_at":"2026-10-18T17:30:36Z","board_verified":true,"closed_at":null,"days_open":265,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":265},"description":"We are seeking a highly skilled and inquisitive security engineer with deep technical expertise in mobile threat detection and operating system internals. This role focuses on conducting forensics analysis of potentially compromised devices to research, develop, and improve our detection capabilities against advanced mobile threats. Experience in analyzing data from iOS backups and diagnose is at the core of the role. The ideal candidate combines strong technical depth with an open and adaptive research mindset, maintaining versatility across diverse security challenges. A strong ability to code for the iOS environment, alongside conducting and reviewing high-quality technical work, is essential for success in this position.\nLocation: Europe\nKey Responsibilities:\nDesign, prototype, and implement new detection techniques and algorithms for the iOS platform based on forensics data coming both from the runtime environment and the offline iOS sysdiagnose and backup files.\nLead and participate in structured brainstorming sessions to generate novel detection ideas against advanced mobile threats.\nAnalyze, document and make use of iOS internals features in an attempt to improve the runtime and offline detection capabilities.\nDevelop, maintain, and improve internal tooling and automation to accelerate analysis, triage, and detection development.\nReview and interpret forensic data provided by customers, produce clear technical reports, and provide actionable guidance and remediation support.\nWrite and publish technical blog posts to raise awareness of emerging security risks and share insights with customers and the wider security community.\nRequired Skills & Experience:\nProven ability to collaborate effectively within a team environment, including forming and leading focused sub-groups to deliver specific project features or research objectives.\nStrong knowledge of iOS operating system internals (e.g., diagnose, encrypted backup, daemons/services, sandboxing, code-signing), with a particular focus on the capability to use the data provided by the operating system to detect a compromised device.\nGood previous experience in data analysis methods applied to forensics investigations.\nProficiency in reverse engineering using tools such as IDA Pro, Ghidra, Hopper, or equivalent, including experience writing scripts, leveraging their SDKs, and isolating and reporting technical issues.\nDemonstrated ability to think both offensively and defensively, approaching analysis tasks with the mindset of both an attacker and a defender.\nSolid programming experience in C, Python, Objective-C and Swift, with the ability to produce efficient, maintainable, and secure code.\nCapability to reverse engineer proprietary protocols and interprocess communication mechanisms (e.g., XPC, mach messages, IOKit) is considered a plus.\nPractical knowledge of jailbreak methods and iOS exploit classes (e.g., kernel exploits, sandbox escapes, code-signing bypasses), ideally experience in analyzing such exploits or exploit chains is a big plus.","description_format":"text","description_chars":3052,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"},{"name":"Germany","iso":"DE","kind":"country"},{"name":"France","iso":"FR","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"country"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"country"},{"name":"Netherlands","iso":"NL","kind":"country"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Latvia","iso":"LV","kind":"country"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"},{"name":"Argentina","iso":"AR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-01-26T00:51:13Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.488,"p_room":0.36,"age_days":264,"expected_fill_days":140,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/zimperium-detection-researchersecurity-engineer-ios-focused","json_url":"https://alion.io/job/zimperium-detection-researchersecurity-engineer-ios-focused.json","meta":{"generated_at":"2026-10-18T17:59:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22867,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2907},"rest":"https://alion.io/mcp/rest/get_company?id=2907"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzimperium-detection-researchersecurity-engineer-ios-focused"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzimperium-detection-researchersecurity-engineer-ios-focused"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzimperium-detection-researchersecurity-engineer-ios-focused"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zimperium-detection-researchersecurity-engineer-ios-focused\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzimperium-detection-researchersecurity-engineer-ios-focused"}]}