Senior Endpoint Engineer, EDR (macOS)

What you'll do

• Develop and harden macOS daemons, agents, and system extensions; instrument OS activity and build detection, correlation, and prevention capabilities.
• Maintain agent architecture, performance, testing, and release quality; investigate customer escalations and resolve root causes.
• Partner with security research, AI, platform, and product teams to use sensor signals for on-device classification, policy enforcement, interventions, and investigation timelines.

What they ask for

• 10+ years delivering production native systems software (Swift, C, C++, or Objective-C), including substantial endpoint security, OS internals, or comparable performance-critical work; strong current Swift and modern concurrency skills.
• Deep macOS internals knowledge and production experience with the Endpoint Security framework and/or Network Extensions.
• Experience building or operating an EDR, EPP, XDR, DLP, or insider-risk product, or equivalent detection-and-response engineering.
• Low-level debugging, concurrent programming, fleet-scale performance and stability, scripting, and clear communication skills.

Nice to have

• Reverse engineering, malware analysis, or exploit and vulnerability research.
• On-device ML inference experience, browser telemetry integrations, or cross-platform endpoint agent experience.

Tools

Swift, C, C++, Objective-C, Endpoint Security framework, Network Extensions, XPC, Python

AI focus

Collaborate on using sensor signals for on-device ML classification, intent-aware policy enforcement, just-in-time interventions, and investigation timelines.