MacOS Cyber Security Engineer, Endpoint Security – C++, Swift

This is a fully remote position, open to applicants in United States.

📋 Description

• Contribute to the development of the macOS sensor for CrowdStrike Falcon, an on-device security agent.

• Oversee file, process, network, and identity activity monitoring.

• Prevent malicious activities and transmit telemetry data to the cloud.

• Create and sustain user-space System Extension code.

• Write highly concurrent and reliable code while optimizing for memory, CPU, and overall performance.

• Collaborate with code utilized across Mac, Windows, and Linux platforms.

• Execute or maintain process models and inter-process communication (IPC) using launchd and XPC.

• Manage Endpoint Security blocking (AUTH) and handle notification events, approvals, and upgrades.

• Create Network Extension content and packet filters utilizing Network.framework.

• Enforce code-signature and certificate validation, Keychain integration, entitlements, hardened runtime, and macOS privacy permissions.

• Assist with IOKit, DiskArbitration, installers, notarization, and MDM deployment using Jamf, Intune, or similar tools.

• Optionally design SwiftUI and AppKit applications and app extensions.

• Conduct testing against macOS and Xcode beta versions and release EDR/AV, network security, or device-management solutions.

⛳️ Requirements

• 6-10 years of relevant experience; more senior roles may be considered.

• Only U.S. Citizens (USC) or Green Card (GC) holders are eligible.

• Proficiency in Modern C++ (C++17/20).

• Experience with Swift 6, including features such as async/await, actors, and strict concurrency checking.

• Knowledge of Objective-C++ for bridging Swift, C++, and C APIs.

• Familiarity with macOS systems programming, including Foundation, CoreFoundation, GCD, pthreads, POSIX/BSD APIs, Mach IPC, launchd, and XPC.

• Skills in profiling CPU and memory using Instruments and os_signpost.

• Proficient in debugging with LLDB, analyzing crash logs, and os_log.

• Experience with XCTest, sanitizers, fuzzing, and xcodebuild-based CI.

• Exposure to both Apple Silicon and Intel architectures.

• Experience working with codebases shared across Mac, Windows, and Linux.

• Expertise in one or more core areas: Process model and IPC; Endpoint Security and System Extensions; Network Extension; security and cryptography; devices and storage; packaging and deployment; performance, debugging, and testing.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and remote work options.

• Generous paid time off and holiday policies.

• Opportunities for professional development and continuous learning.