Sr. Software Engineer - Sensor, macOS (Hybrid)

About the Role: You'll be joining our MacOS Sensor Foundation team supporting CrowdStrike's flagship Falcon endpoint protection platform. This team is responsible for core sensor components in user space (C++, Swift). We build and maintain the MacOS sensor, creating and/or building a platform for products and features that empower customers with prevention, detection, and response capabilities.

Location: This role is hybrid, requiring 2-3 days per week on-site at one of the posted locations.

CrowdStrike Falcon Host is a two-component security product. One component is a “sensor”: a driver installed on client machines that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon Host cloud. The sensor processes thousands of events per second to provide deep visibility into operations on the endpoint, and performs rich correlation and computation to identify malicious events and blocks malicious activity.

The cloud component aggregates sensor telemetry for each customer’s network, correlates malicious behavior across multiple machines, and presents our customers’ operations teams with a prioritized summary of the threats detected in their environments.

This is an Sr. Engineer - macOS Engineer role in the engineering team that delivers the sensor (lightweight agent) on macOS. Engineers in the team own the design and development of core features on the platform. Features will cross-cut most core OS subsystems such as file system, memory, process, and networking. Many features are also built in a way that they will have shared components across Windows and Linux.

…