Remote Threat Intelligence Analyst - macOS Security

MaziCTools; United States; Remote; USD 128,000 - 238,000; Full time

Benefits offered by this job

Medical & dental coverage

Employee stock programs

Tuition reimbursement

Relocation assistance

Job summary

Apple is seeking a world‑class Threat Intelligence Analyst to join SEAR and protect over a billion endpoints across macOS devices. You will join security researchers to operationalize intelligence and inform security engineering decisions.

You will analyze advanced cyber actors, write scripts for rapid tasks, and apply MITRE ATT&CK and the Diamond Model. Remote work with occasional travel is offered, with competitive compensation and extensive benefits.

Qualifications

• Minimum of 4 years experience in threat intelligence or security research.
• Passion for identifying and mitigating cyber threats against macOS.
• Strong understanding of threat intelligence cycle and cyber operations.
• Experience analyzing highly complex threat campaigns, including infrastructure, malware, and endpoints.
• Proven track record investigating macOS threat activity.

Responsibilities

• Analyze and understand advanced cyber actors, capabilities, and techniques.
• Write scripts to expedite common threat intelligence tasks.
• Utilize the Diamond Model, MITRE ATT&CK for threat intelligence and research.
• Collaborate with security researchers to contextualize intelligence for decision makers.
• Contribute to development of security technologies and mitigations.
• Work with security engineers to design mitigations that preserve privacy and usability.
• Distill complex problems into manageable tasks and drive them to completion.
• Remote work, with very occasional travel.

Skills

Threat intelligence

MacOS expertise

Scripting

Remote collaboration

Education

Bachelor's/Master's in related field

Tools

MITRE ATT&CK

Diamond Model

Job description

Apple is seeking a world‑class Threat Intelligence Analyst to join SEAR and protect over a billion endpoints across macOS devices. You will join security researchers to operationalize intelligence and inform security engineering decisions.

You will analyze advanced cyber actors, write scripts for rapid tasks, and apply MITRE ATT&CK and the Diamond Model. Remote work with occasional travel is offered, with competitive compensation and extensive benefits.