Senior macOS Cyber Security Engineer – Endpoint Security (C++/Swift)

Job Title: Senior macOS Cyber Security Engineer – Endpoint Security (C++/Swift)

Location: Remote – United States
Work Schedule: Pacific Standard Time (PST) working hours
Employment Type: Contract ( W2 only )
Experience: 6–10 years (more experienced candidates may also be considered)
Work Authorization: No specific visa restriction(F1 Opt not allowed)

Job Overview

We are looking for experienced Senior macOS Cyber Security Engineers to develop, enhance, and maintain endpoint security capabilities for the CrowdStrike Falcon sensor. This on-device security agent monitors file, process, network, and identity activity, prevents malicious behavior, and sends security telemetry to the cloud.

The role focuses on macOS systems programming, endpoint security, high-performance software development, and security agent reliability. The sensor operates in user space as a macOS System Extension, requiring strong expertise in concurrency, memory management, CPU optimization, debugging, and cross-platform development.

Key Responsibilities

• Develop and maintain macOS endpoint security components using modern C++, Swift, and Objective-C++.

• Implement security features that monitor file, process, network, and identity activities.

• Work with macOS System Extensions, Endpoint Security APIs, Network Extensions, and interprocess communication mechanisms.

• Design and optimize concurrent, high-reliability software with careful attention to CPU utilization, memory consumption, and system performance.

• Troubleshoot complex issues using debugging, crash analysis, logging, and profiling tools.

• Develop and maintain automated tests and contribute to continuous integration pipelines.

• Collaborate on shared codebases supporting macOS, Windows, and Linux.

• Ensure compatibility with Apple Silicon and Intel-based Mac systems.

• Contribute to secure software design, code quality, performance improvements, and production reliability.

Required Technical Skills

1. Programming Languages

   • Strong hands-on experience with modern C++ (C++17/C++20).

   • Proficiency in Swift, including Swift 6, async/await, actors, and strict concurrency checking.

   • Experience with Objective-C++ for integrating Swift, C++, and C APIs.

2. macOS Systems Programming

   • Strong knowledge of Foundation and CoreFoundation.

   • Experience with Grand Central Dispatch (GCD), pthreads, POSIX/BSD APIs, and Mach IPC.

   • Familiarity with launchd daemons and agents, XPC C APIs, and NSXPCConnection.

3. Performance, Debugging, and Testing

   • Experience profiling CPU and memory usage with Instruments and os_signpost.

   • Proficiency in LLDB, crash log analysis, and os_log.

   • Experience with XCTest, sanitizers, fuzz testing, and xcodebuild-based CI.

   • Understanding of performance optimization and memory management in production software.

4. Cross-Platform Development

   • Experience working with large codebases shared across macOS, Windows, and Linux.

   • Ability to develop reliable, maintainable, and performance-sensitive system software.

Core macOS Security Expertise

Candidates should have hands-on experience in one or more of the following areas:

• Endpoint Security and System Extensions: Endpoint Security clients, authorization (AUTH) events, notification events, user/MDM approval, and extension upgrades.

• Network Security: Network Extension content filters, NEFilterDataProvider, NEFilterPacketProvider, and Network.framework.

• Process Management and IPC: launchd services, daemons, agents, XPC, and interprocess communication.

• Security and Cryptography: Code-signature verification using SecCode/SecStaticCode, certificate validation using SecTrust, Keychain, entitlements, hardened runtime, and macOS privacy permissions.

• Devices and Storage: IOKit for hardware and device enumeration, and DiskArbitration for disk and volume events.

• Packaging and Deployment: macOS installers, application notarization, and MDM configuration profiles using Jamf, Microsoft Intune, or similar platforms.

Nice-to-Have Skills

• Experience developing SwiftUI or AppKit applications and app extensions.

• Experience testing software against macOS and Xcode beta releases before public availability.

• Background in endpoint detection and response (EDR), antivirus (AV), network security, or device-management products.

• Experience building and maintaining security agents or other low-level system software.

Ideal Candidate Profile

The ideal candidate will have strong macOS systems programming experience, proficiency in C++ and Swift, and practical knowledge of operating-system internals, concurrency, debugging, and performance optimization. Candidates with experience building commercial endpoint security products, EDR/AV agents, or macOS security extensions will be highly preferred.

Interview Process

Interviews are expected to begin immediately. Candidates should be available for prompt interview scheduling and comfortable working during Pacific Time business hours.

Submission Details

Interested candidates should share their updated resume along with their current location, work authorization, contact details, total years of experience, relevant macOS development experience, expected hourly rate, and interview availability.