Remote macOS Threat Detection Engineer

CrowdStrike Inc.; Atlanta (GA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive wellness programs

Paid time off and holidays

Parental and adoption leave

Professional development opportunities

Employee networks and communities

Office amenities and culture

Job summary

CrowdStrike Inc. is seeking an Engineer III to research and develop macOS-based detection techniques, and to integrate them into the Falcon endpoint sensor. You will join a nimble team of macOS engineers, contributing across the full development lifecycle from concept to deployment.

The role emphasizes deep macOS internals expertise, high-concurrency code, and collaboration across distributed teams while leveraging AI to improve security outcomes.

Qualifications

• 3+ years of experience with either reverse engineering, threat detection, and malware analysis, and familiarity with on-device development, or
• Designing, building, and delivering high-quality software in Swift, C/C++, or Objective-C (and ideally similar languages), and familiarity or a proven interest in security
• Solid knowledge of macOS OS internals: processes, storage, networking, and memory management, along with relevant components, APIs, and frameworks
• Ability to develop high-quality code in Swift and/or C/C++ that meets high-concurrency, reliability, and performance requirements
• Ability to deliver enterprise software while collaborating across functions: CI, testing, debugging, performance tracing, release management, big-data telemetry analysis, and issue handling
• Team player—able to communicate, collaborate, and work effectively in a distributed team, and to clearly articulate thoughts and designs to peers and upper management
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Responsibilities

• Design and build detection logic and systems leveraged across teams within CrowdStrike to detect cyber attackers and stop breaches
• Research techniques for detecting malicious activity, including some reverse engineering and/or big-data analysis
• Own features from design to delivery, developing them into production-level solutions for deployment in the endpoint sensor
• Extend our existing codebase using Swift, C++, Python, and other tools and DSLs (domain specific languages) as appropriate
• Apply engineering best practices—secure coding, testing paradigms, debugging, performance, code reviews, CI/CD, and OS internals—to ensure our sensor code is fast and reliable
• Collaborate with a cross-functional team spread across geographies
• Respond to and troubleshoot product issues reported by customers
• Be an energetic self-starter with the ability to take ownership and be accountable for individual deliverables
• Take on other projects as assigned

Skills

Reverse engineering

Threat detection

Malware analysis

Swift

C/C++

Objective-C

MacOS internals

Multi-threading

CI/CD

Debugging

Big-data telemetry

AI technologies

Tools

Swift

Python

Job description

CrowdStrike Inc. is seeking an Engineer III to research and develop macOS-based detection techniques, and to integrate them into the Falcon endpoint sensor. You will join a nimble team of macOS engineers, contributing across the full development lifecycle from concept to deployment.

The role emphasizes deep macOS internals expertise, high-concurrency code, and collaboration across distributed teams while leveraging AI to improve security outcomes.