Senior macOS Cyber Security Engineer – Endpoint Security (C++/Swift)

Job description

Work Authorization: No specific visa restriction(F1 Opt not allowed)

Job Overview

We are looking for experienced Senior macOS Cyber Security Engineers to develop, enhance, and maintain endpoint security capabilities for the CrowdStrike Falcon sensor. This on-device security agent monitors file, process, network, and identity activity, prevents malicious behavior, and sends security telemetry to the cloud.

The role focuses on macOS systems programming, endpoint security, high-performance software development, and security agent reliability. The sensor operates in user space as a macOS System Extension, requiring strong expertise in concurrency, memory management, CPU optimization, debugging, and cross-platform development.

Key Responsibilities

Develop and maintain macOS endpoint security components using modern C++, Swift, and Objective-C++.

Implement security features that monitor file, process, network, and identity activities.

Work with macOS System Extensions, Endpoint Security APIs, Network Extensions, and interprocess communication mechanisms.

Design and optimize concurrent, high-reliability software with careful attention to CPU utilization, memory consumption, and system performance.

Troubleshoot complex issues using debugging, crash analysis, logging, and profiling tools.

Develop and maintain automated tests and contribute to continuous integration pipelines.

Collaborate on shared codebases supporting macOS, Windows, and Linux.

Ensure compatibility with Apple Silicon and Intel-based Mac systems.

Contribute to secure software design, code quality, performance improvements, and production reliability.

Required Technical Skills

Programming Languages

Strong hands-on experience with modern C++ (C++17/C++20).

Proficiency in Swift, including Swift 6, async/await, actors, and strict concurrency checking.

Experience with Objective-C++ for integrating Swift, C++, and C APIs.

macOS Systems Programming

Strong knowledge of Foundation and CoreFoundation.

Experience with Grand Central Dispatch (GCD), pthreads, POSIX/BSD APIs, and Mach IPC.

• Familiarity with launchd daemons and agents, XPC C APIs, and NSXPC
• Connection.

Performance, Debugging, and Testing

Experience profiling CPU and memory usage with Instruments and os_signpost.

Proficiency in LLDB, crash log analysis, and os_log.

Experience with XC

Test, sanitizers, fuzz testing, and xcodebuild-based CI.

Understanding of performance optimization and memory management in production software.

Cross-Platform Development

Experience working with large codebases shared across macOS, Windows, and Linux.

Ability to develop reliable, maintainable, and performance-sensitive system software.

Core macOS Security Expertise

Candidates should have hands-on experience in one or more of the following areas:

Endpoint Security and System Extensions: Endpoint Security clients, authorization (AUTH) events, notification events, user/MDM approval, and extension upgrades.

Network Security: Network Extension content filters, NEFilterDataProvider, NEFilterPacketProvider, and Network.framework.

Process Management and IPC: launchd services, daemons, agents, XPC, and interprocess communication.

Security and Cryptography: Code-signature verification using SecCode/SecStaticCode, certificate validation using SecTrust, Keychain, entitlements, hardened runtime, and macOS privacy permissions.

Devices and Storage: IO

Kit for hardware and device enumeration, and DiskArbitration for disk and volume events.

Packaging and Deployment: macOS installers, application notarization, and MDM configuration profiles using Jamf, Microsoft Intune, or similar platforms.

Nice-to-Have Skills

Experience developing SwiftUI or AppKit applications and app extensions.

Experience testing software against macOS and Xcode beta releases before public availability.

Background in endpoint detection and response (EDR), antivirus (AV), network security, or device-management products.

Experience building and maintaining security agents or other low-level system software.

Ideal Candidate Profile

The ideal candidate will have strong macOS systems programming experience, proficiency in C++ and Swift, and practical knowledge of operating-system internals, concurrency, debugging, and performance optimization. Candidates with experience building commercial endpoint security products, EDR/AV agents, or macOS security extensions will be highly preferred.

Interview Process

Interviews are expected to begin immediately. Candidates should be available for prompt interview scheduling and comfortable working during Pacific Time business hours.

Submission Details

Interested candidates should share their updated resume along with their current location, work authorization, contact details, total years of experience, relevant macOS development experience, expected hourly rate, and interview availability.

Powered by JazzHR

Remote

Skills

Access Authorization, Analysis Skills, Antivirus, Apple, Apple Macs, Application Programming Interface (API), Audiovisual, C Programming Language, C++ Programming Language, CPU (Central Processing Unit), Cloud Computing, Computer Hacking, Concurrency, Continuous Integration, Cryptography, Debugging Skills, Endpoint Security, High Reliability Software, Identify Issues, Intel Product Family, InterProcess Communication (IPC), Internet Security, Linux Operating System, Mac OS Programming, Mac Operating System, Manufacturing Data Management, Memory Hardware, Memory Management, Microsoft Product Family, Microsoft Windows Operating System, Multiplatform/Cross-Platform, Network Security, Objective-C Programming Language, Performance Management, Performance Tuning/Optimization, Process Management, Programming Languages, Reliability Engineering, Security Monitoring, Software Design, Software Development, Software Engineering, Software Installation, Systems/Internals Programming, Telemetry, Test Automation

Inabia Software & Consulting Inc.