About The Position
Apple’s Security Engineering & Architecture organization works to secure Apple products by finding and helping eliminate vulnerabilities across Apple’s hardware and software ecosystem. The team conducts full-stack security research across cellular, Wi-Fi, Bluetooth, Thread, and satellite technologies, including SoC firmware and host-side services. The intern will explore ways to research cellular baseband firmware security without relying on complex hardware and RF test setups. They will survey baseband emulation, firmware rehosting, and AI-based security research, and assess internal tools for potential improvements. Based on these findings, they will help design and prototype an emulation-based framework combining traditional and AI-assisted analysis to make vulnerability discovery, crash triage, and fix verification easier and more scalable. The intern will work with experienced security researchers on problems at the intersection of wireless systems, firmware, and AI.
Requirements
- Familiarity with cellular technologies, 3GPP standards (2G/3G/4G/5G), and baseband architectures.
- Solid understanding of low-level systems, including embedded operating system internals and ARM architecture.
- Hands-on experience with C, C++, and Python.
- Ability to apply AI techniques and tools, such as LLMs, to security research and software development.
- Experience with firmware emulation, rehosting, and instrumentation tools and techniques.
- Experience in vulnerability research on wireless protocol stacks, including firmware, host-controller interfaces, and over-the-air behavior.
- Familiarity with vulnerability classes such as parsing, state-machine, downgrade, and logic flaws.
- Familiarity with binary reverse engineering tools such as IDA and Ghidra.
- Familiarity with practical RF and over-the-air tools, such as software-defined radio (SDR) and equipment for capturing and injecting wireless signals.
Nice To Haves
- Knowledge of Apple operating systems such as iOS or macOS; this is a plus but not required.
Responsibilities
- Survey the state of the art in baseband emulation, firmware rehosting, and AI-based security research.
- Assess existing internal tooling and identify opportunities for improvement.
- Help design and prototype an emulation-based framework combining traditional and AI-assisted analysis.
- Develop tools and methods to support cellular baseband vulnerability discovery, crash triage, and fix verification.
- Work with security researchers on wireless systems, firmware, and AI.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Intern
Education Level
No Education Listed
