MacOS Security Sensor Engineer III

CrowdStrike; Redmond (WA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-competitive compensation

Wellness programs

Vacation & holidays

Parental leave

Professional development

Office culture

Job summary

CrowdStrike is seeking an Engineer III to research and build detection features for macOS, integrating them into our Falcon sensor. You will work closely with macOS engineers and reuse shared code with Windows and Linux sensor platforms.

The role emphasizes a strong software engineering background, macOS internals knowledge, and experience with security-focused development. Hybrid work in multiple US cities is available.

Qualifications

• 3+ years of experience in reverse engineering, threat detection, malware analysis, or on-device development.
• Proficiency in Swift, C/C++, or Objective-C and security-focused development.
• Solid knowledge of macOS internals including processes, storage, networking, and memory management.
• Ability to write high-quality, concurrent, performant code and deliver enterprise software across teams.

Responsibilities

• Design and build detection logic used across CrowdStrike teams to stop breaches.
• Research techniques for detecting malicious activity and potentially perform reverse engineering.
• Own features from design to delivery and production deployment in the endpoint sensor.
• Extend codebase using Swift, C++, Python, and related languages and DSLs as appropriate.
• Apply secure coding practices, testing, debugging, performance tracing, and CI/CD.

Skills

Reverse engineering

Threat detection

Swift

C/C++

Python

macOS internals

Security experience

Team collaboration

Job description

CrowdStrike is seeking an Engineer III to research and build detection features for macOS, integrating them into our Falcon sensor. You will work closely with macOS engineers and reuse shared code with Windows and Linux sensor platforms.

The role emphasizes a strong software engineering background, macOS internals knowledge, and experience with security-focused development. Hybrid work in multiple US cities is available.