QNX Senior Security Researcher

2 months ago

Ottawa, CanadaSenior

Base Salary

$109k - $159k/yr

Responsibilities

Hunt for vulnerabilities across QNX products and embedded software components.
Perform penetration testing and offensive security assessments against embedded platforms.
Design and execute large-scale fuzzing campaigns to identify memory corruption defects, logic flaws, and emerging vulnerability classes.
Investigate crashes and software defects, conduct root-cause analysis, and develop exploits to demonstrate attack scenarios.
Apply AI/ML-assisted techniques to vulnerability discovery and security analysis.
Build automated security-testing frameworks, fuzzers, scanners, and exploit-validation pipelines.
Collaborate with engineering teams to reproduce, triage, and remediate vulnerabilities.
Contribute security tools, methodologies, and research while tracking emerging threats affecting embedded operating systems.

Hands-on experience in vulnerability research, penetration testing, exploit development, or offensive security.
Practical experience with fuzzing frameworks such as AFL or libFuzzer.
Strong understanding of memory management, process isolation, POSIX APIs, concurrency, and embedded-systems concepts.
Knowledge of vulnerability classes including use-after-free, heap corruption, buffer overflows, race conditions, privilege escalation, and logic vulnerabilities.
Strong programming skills in C, C++, and Python.
Experience developing automation and tooling for security testing or vulnerability discovery.
Ability to independently drive research initiatives from concept through discovery and validation.
Preferred experience applying AI or machine learning to security research or vulnerability detection.
Preferred knowledge of automotive cybersecurity, embedded systems, QNX-based platforms, ISO/SAE 21434, or secure software development practices.
Preferred reverse-engineering experience with IDA Pro, Ghidra, Binary Ninja, or similar tools.
Preferred experience with operating systems, kernels, drivers, or low-level system software.

Medical, dental, vision, life, and disability insurance for eligible employees.
Retirement benefits, employee share purchase program, and paid time off for eligible employees.
Eligibility for the BlackBerry Variable Incentive Pay program.
Regular full-time position with 40 scheduled hours per week.
Active opening intended to be filled immediately.

1,001-5,000 employees