Remote Emulation Engineer Jobs in Virginia (NOW HIRING)

Description
Company Overview:
Cellebrite's (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite's AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite's digital forensic and investigative solutions-available via cloud, on-premises and hybrid deployments-to close cases faster and safeguard communities.
To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite.
Role Overview:
We are looking for a Sales Engineer, Federal with a background in mobile development and iOS internals to serve as the primary technical bridge between our Corellium platform and the world's most elite security research teams. In this role, you will be positioning, demonstrating, and selling the Corellium platform to researchers, reverse engineers, and security analysts. You must be able to "speak the language" of ARM assembly, kernel debugging, and zero-day exploitation to prove how our virtualization technology turns weeks of manual hardware-tinkering into hours of automated research.
Key Responsibilities:

• Technical Value Positioning: Conduct technical demonstrations for iOS and Android researchers, showing how virtualized ARM environments outperform physical "device labs" in speed, scale, and observability.
• Workflow Optimization: Consult with prospective clients to map their existing mobile reverse engineering workflows (IDA Pro, Frida, Ghidra) into the Corellium API for massive efficiency gains.
• Proof of Concept (PoC) Leadership: Lead technical evaluations for sophisticated customers, helping them bypass anti-debugging/anti-virtualization checks to prove the platform's efficacy.
• Competitive Intelligence: Maintain an expert-level understanding of the iOS/Android security landscape to articulate why Corellium is superior to physical device farms or standard emulators.
• Cross-Functional Feedback: Act as the "Voice of the Researcher" for our Product team, translating high-level exploit trends and researcher frustrations into new features.

Requirements
Prior experience or advanced training in Security Research ideally focused on mobile is preferred.
Mobile Internals & Security (Required)

• The "Researcher's Vocabulary": Fluency in iOS/Android security concepts, including XNU Kernel structures, PAC (Pointer Authentication Codes), ASLR, and the App Sandbox.
• OS Internals: Literacy in User Mode and Kernel Mode operations (e.g., *OS Internals concepts).
• Development Background: Proficiency in Swift, Objective-C, or Java/Kotlin to understand modern app construction and vulnerability surfaces.

Reverse Engineering & Automation (Required)

• Tooling Literacy: Proficient with 2 or more of the following tools, IDA Pro, Ghidra, Binary Ninja, Frida, and Burp Suite.
• Scripting: Proficiency in Python, Bash, or JavaScript to demonstrate Corellium's gRPC and REST APIs for automated scaling.
• Database & CI/CD: Basic SQL knowledge and familiarity with GitHub/Jenkins for integrated research pipelines.

Systems & Network Administration (Strongly Desired)

• Advanced Linux/Unix Proficiency: Comfortable with CLI and system administration (equivalent to Red Hat System Administration).
• Networking Mastery: Strong understanding of IP networking, gateways, and virtual networking.
• Secure Connectivity: Proficiency in configuring and securing remote authentication via SSH keys, file transfers, and tunneling.
• Network Segmentation: Practical knowledge of VPN tunneling (OpenVPN, Wireguard) and VLANs for secure environment isolation.

Virtualization & Emulation (Desired)

• Hypervisor experience: Understanding of KVM, libvirt, and the fundamental architectural differences between emulation and virtualization (QEMU).
• ARM Architecture: Familiarity with ARM A-Profile virtualization and SMMU (System Memory Management Unit).

Desired Attributes:

• Technical Credibility: While you do not need to be an active exploit writer, you should be able to explain the difference between a checkm8-based bypass and a kernel heap overflow.
• Strategic Communicator: Ability to pivot from a deep-dive technical debugging session with a researcher to a "value and ROI" conversation with a CISO or Lab Manager.
• Problem Solver: Ability to investigate instruction traces to find workarounds when an app's obfuscator detects a virtual device.

• • Prior Corellium Experience: Previous experience configuring and working with Corellium is a plus