Senior macOS Cyber Security Engineer, Endpoint Security – C++/Swift

This is a fully remote position, open to applicants in United States.

📋 Description

• Contribute to the macOS sensor development for CrowdStrike Falcon, a security agent that operates on-device.

• Oversee file, process, network, and identity activities.

• Prevent malicious actions and relay telemetry data to the cloud.

• Design and sustain a user-space System Extension.

• Create highly concurrent and dependable code while maintaining a keen focus on memory, CPU consumption, and overall performance.

• Collaborate on code utilized across macOS, Windows, and Linux platforms.

• Potentially design SwiftUI and AppKit applications along with app extensions.

• Conduct testing using macOS and Xcode betas prior to public releases.

• Deliver or assist EDR/AV, network security, or device-management solutions.

⛳️ Requirements

• Must be a U.S. Citizen (USC) or a holder of a Green Card (GC).

• 6–10 years of relevant experience; more senior qualifications may be considered.

• Proficient in modern C++ (C++17/20) and Swift 6, including features like async/await, actors, and stringent concurrency checks.

• Experience with Objective-C++ for bridging Swift, C++, and C APIs.

• Skilled in macOS systems programming with Foundation, CoreFoundation, GCD, pthreads, POSIX/BSD APIs, Mach IPC, launchd, and XPC.

• Familiar with profiling CPU and memory using Instruments and os_signpost.

• Proficient in debugging using LLDB, crash logs, and os_log.

• Experienced in XCTest, sanitizers, fuzzing, and xcodebuild-based CI.

• Knowledgeable in Apple Silicon and Intel architectures.

• Experienced with codebases that are shared across macOS, Windows, and Linux environments.

• Expertise in one or more areas: process models and IPC; Endpoint Security and System Extensions; Network Extension; security and cryptography; devices and storage; packaging and deployment; performance, debugging, and testing.

• Familiarity with Endpoint Security clients that manage blocking (AUTH) and notification events, user/MDM approvals, and upgrades.

• Experience with Network Extension content filters and Network.framework.

• Knowledge of verifying code signatures and certificates, Keychain, entitlements, hardened runtime, and macOS privacy permissions.

• Experience with IOKit and DiskArbitration.

• Proficient with installers, notarization processes, and MDM configuration profiles deployed through Jamf, Intune, or similar platforms.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Flexible work arrangements and remote work options.

• Opportunities for professional development and continuous learning.

• Competitive salary and performance-based bonuses.

• Supportive and inclusive company culture.