Career EngineCareer Engine
Your matchExample
87%match
Why you fitThis role calls for Macos System Internals and Apple Endpoint Security API — tell us what you know and we'll check the rest.
Gap to noteAlso lists System Extension Development — worth confirming before you apply.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Job Opening

huntress logo

Principal macOS Security Researcher

huntress · United States of America · Posted 27 days ago

$215k–$225kremotemgr
macOSApple Endpoint Security APIsystem extensionsSwiftmalware analysisreverse engineeringMach-Ored teaming

Lead groundbreaking macOS security research that directly shapes product strategy, from discovering new telemetry to shipping detection capabilities that protect SMB endpoints.

Reports to: Manager, Product Research Location: Remote US

Compensation Range: $215,000.00 to $225,000.00 base plus bonus and equity

  • Lead product research initiatives that develop and evaluate macOS security product strategies and technologies
  • Identify and prototype new telemetry from Apple's Endpoint Security API and other macOS subsystems to expand prevention, hardening, and detection capabilities
  • Reproduce and analyze macOS attacks through hands-on execution of attacker techniques, malware detonation, and vulnerability exploitation
  • Reverse engineer macOS malware and Apple's own security frameworks (XProtect, XProtect Remediator, Gatekeeper, TCC) to identify coverage gaps and inform product direction
  • Prototype and test new tools and methodologies for offensive operations against macOS endpoints, including EDR evasion and bypass research
  • Build proof-of-concept implementations that demonstrate the feasibility of new capabilities
  • Document research findings and collaborate with Detection Engineering on writing and tuning detectors
  • Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Security teams
  • Stand up ephemeral research environments and attacker infrastructure using cloud, VM, and container technologies
  • Track Apple platform changes across beta and release cycles, and assess their impact on agent capability, telemetry, and detection coverage
  • Identify and address gaps in macOS product coverage, including false positive and false negative investigations
  • Develop internal and external technical documentation to educate customers and adjacent teams on macOS security risks and opportunities
  • Mentor and teach across the team on macOS internals, malware analysis, and research methodology
  • Promote Huntress' reputation through public speaking, CFPs, blogs, and media interaction

What You Bring To The Team:

…

Apply on huntress's site →

This posting is sourced from huntress's own career site — applying takes you there directly.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Related roles

This role centers on Macos System Internals, Apple Endpoint Security API, System Extension Development, and Swift. There are 47 open roles at huntress right now.

Want roles like this found for you?

Set your Focus once. Career Engine screens every new opening every week.

A scored, explained shortlist — not a keyword match — delivered weekly. Free for one profile.