As an iOS engineer, you will be responsible for improving our scanning engine, for analyzing iOS applications and automatically finding security and privacy issues.
You will:
- Work with the mobile team on a set of tools we've built to statically analyze IPAs in order to find security issues. We have open-sourced parts of our iOS static analyzer at https://github.com/datatheorem/strongarm.
- Improve our dynamic analyzer, which instruments mobile applications in order to study their behavior while running on a device, and detect dangerous actions that could lead to security issues.
- Be an active member of the Data Theorem's engineering team, which is spread across the United States, England and France.
- Research and build new security checks to be added to our scanning engine, so we can help customers build more secure iOS apps.
We’re looking for someone who has:
- Significant experience implementing iOS applications and tools.
- Good understanding of the iOS runtime.
- Some experience writing tools in Python.
- Bonus points: experience with taking apart iOS software in order to understand and/or modify it. This includes experience with Objective-C runtime APIs (ie. swizzling) and tools such as CydiaSubstrate, Frida, etc.
- No information security experience required - we are more interested in software engineering backgrounds.
Qualifications:
- Bachelor's degree in Engineering or equivalent work experience in related field.
- 3 plus years of experience working with mobile technologies.
Skills Required
- Bachelor's degree in Engineering or equivalent work experience
- 3 plus years of experience working with mobile technologies
- Significant experience implementing iOS applications and tools
- Good understanding of the iOS runtime
- Some experience writing tools in Python
- Experience with Objective-C runtime APIs and tools like CydiaSubstrate, Frida
What We Do
Data Theorem prevents AppSec data breaches. We provide SAST, DAST, & RASP for API Security, Web Security, Mobile Security, and Cloud Security. Our products provide Inventory (Discovery), Security Testing (SAST/DAST), and Active Protection (RASP) for APIs (RESTful, GraphQL, gRPC, and SOAP), mobile apps (iOS, Android, React Native, Flutter), Web Apps (Web 2.0 & Single Page Apps), & Cloud Apps + CSPM (Serverless Lambda, Google Cloud Functions, Azure Functions). Data Theorem is headquartered in Palo Alto, CA., with offices in New York, Chicago, Boston, Paris, and London. For more information visit https://www.datatheorem.com.
