macOS Endpoint Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Contribute to the macOS sensor for CrowdStrike Falcon, an on-device security solution.

• Oversee file, process, network, and identity activities.

• Prevent harmful actions and transmit telemetry data to the cloud.

• Design and sustain a user-space System Extension.

• Create high-concurrency, reliable code while optimizing memory, CPU, and performance.

• Collaborate with code utilized across Mac, Windows, and Linux platforms.

• Develop and manage endpoint security clients that process blocking AUTH events and notification events.

• Engage with Network Extension content and packet filtering.

• Integrate security and cryptographic functionalities, such as code-signature and certificate validation, Keychain, entitlements, hardened runtime, and macOS privacy permissions.

• Assist with device and storage enumeration and associated events using IOKit and DiskArbitration.

• Manage installers, notarization, and MDM configuration profiles distributed via Jamf, Intune, or comparable tools.

⛳️ Requirements

• 6–10 years of relevant experience (more senior candidates may also be considered).

• Must be a U.S. Citizen (USC) or Green Card (GC) holder; valid work authorization is required.

• Proficiency in Modern C++ (C++17/20).

• Knowledge of Swift 6, including async/await, actors, and strict concurrency checking.

• Experience with Objective-C++ for integrating Swift with C++ and C APIs.

• Familiarity with macOS systems programming utilizing Foundation, CoreFoundation, GCD, pthreads, POSIX/BSD APIs, Mach IPC, launchd, and XPC.

• Expertise in CPU and memory profiling using Instruments and os_signpost.

• Skills in debugging with LLDB, analyzing crash logs, and using os_log.

• Experience with XCTest, sanitizers, fuzzing, and xcodebuild-based CI.

• Familiarity with both Apple Silicon and Intel architectures.

• Experience with codebases shared across Mac, Windows, and Linux environments.

• Proficiency in one or more core areas: Process model and IPC; Endpoint Security and System Extensions; Network Extension; security and cryptography; IOKit and DiskArbitration; packaging and deployment.

• Preferred: Experience with SwiftUI and AppKit; testing on macOS and Xcode betas; delivering EDR/AV, network security, or device-management products.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and advancement.

• Flexible working arrangements and work-life balance initiatives.