MacOS Threat Detection Engineer

CrowdStrike, Inc.; Sunnyvale (CA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market leader compensation

Equity awards

Wellness programs

Parental leave

Professional development

Job summary

CrowdStrike, Inc. in Sunnyvale, CA, is seeking an Engineer III to research and build macOS-based detection techniques for our Falcon sensor.

You’ll split research and implementation, collaborating with macOS engineers and sharing code with Windows and Linux teams to deliver production-grade solutions. The role emphasizes strong software engineering, macOS internals expertise, and security experience, with ownership of features from concept to release and post-release support in a fast-paced,

Qualifications

• 3+ years of experience in reverse engineering, threat detection, and malware analysis or software development in security.
• Strong knowledge of macOS internals: processes, storage, networking, memory management, and related APIs/frameworks.
• Ability to deliver high-quality Swift/C++ code with high-concurrency, reliability, and performance requirements.

Responsibilities

• Design and build detection logic and systems leveraged across teams to detect cyber attackers and stop breaches.
• Research techniques for detecting malicious activity, including reverse engineering and big-data analysis.
• Own features from design to delivery, producing production-level solutions for deployment in the endpoint sensor.
• Extend our codebase using Swift, C++, Python, and related DSLs as appropriate.
• Apply engineering best practices—secure coding, testing, debugging, performance tracing, CI/CD, and OS internals.

Skills

Swift

C/C++

OS internals

Reverse engineering

Security

Big-data analysis

Tools

Python

Xcode

AI tooling

Job description

CrowdStrike, Inc. in Sunnyvale, CA, is seeking an Engineer III to research and build macOS-based detection techniques for our Falcon sensor.

You’ll split research and implementation, collaborating with macOS engineers and sharing code with Windows and Linux teams to deliver production-grade solutions. The role emphasizes strong software engineering, macOS internals expertise, and security experience, with ownership of features from concept to release and post-release support in a fast-paced,