Offensive Security Researcher
Pubblicato il 22-09-2026 - JobLeads in Milano
Milan, Lombardy, Italy Machine Learning and AI
Legga la panoramica di questa possibilità per capire quali competenze sono richieste, incluse le soft skill pertinenti e la padronanza di pacchetti software.
Apple’s Security Engineering & Architecture (SEAR) organization is responsible for the security of all Apple products. Passionate about safeguarding our users, we lead with offence proactively uncovering and eliminating vulnerabilities before attackers ever get the chance.As AI systems become deeply integrated into operating systems, developer tools, and user experiences, they introduce entirely new attack surfaces vulnerable to prompt injection, agentic privilege escalation, data exfiltration, and AI-assisted exploitation at unprecedented scale.Think you have the creativity and determination to break these systems? Join us and help secure the next generation of intelligent platforms used by billions of people.
DescriptionIn this role, you will identify and exploit vulnerabilities in AI-powered features and agentic systems across Apple platforms.
The AI systems themselves are the attack surface. You will help to build offensive capabilities against autonomous systems and anticipate how adversaries may exploit AI enabled systems in the wild.You will join a team working with world-class offensive security researchers. The work is critical directly shapes the security posture of Apple.You will conduct offensive research into AI-specific attack classes, including prompt injection, agentic data exfiltration and lateral movement, persistence mechanisms in AI workflows, AI-assisted vulnerability discovery and exploitation.
Minimum Qualifications
- Solid grounding in common vulnerability classes (memory corruption, logic flaws, auth bypass)
- Strong understanding of modern AI/LLM systems and their failure modes (e.g., prompt injection, data exfiltration, model misuse)
- Experience applying AI/ML tools (e.g., LLMs, agents) to automate or augment security research workflows