ent-security - Senior Endpoint Engineer, EDR (macOS)
Requirements
• 10+ years designing, building, and delivering production native systems software (Swift, C, C++, or Objective-C), a substantial portion of it in endpoint security, OS internals, or comparable performance-critical code with strong, current Swift, including modern concurrency (actors, Sendable, structured concurrency). • Deep working knowledge of macOS internals: process and thread lifecycle, memory management, file systems, code signing and entitlements, launchd, IPC (XPC and Mach primitives), and the TCC permission model. • Hands-on production experience with the Endpoint Security framework and/or Network Extensions, and an understanding of the system extension lifecycle that replaced kernel extensions. • Demonstrated experience building or operating an EDR, EPP, XDR, DLP, or insider-risk product, or equivalent detection-and-response engineering. • Practical fluency in attacker TTPs; you can reason about what an attack looks like in raw telemetry, not just in a written report. • Strong low-level debugging skills: lldb, crash-dump and hang analysis, performance tracing with Instruments or equivalent. • Multi-threaded and concurrent programming under load: synchronization, lock contention, race conditions, actor isolation, and object lifetime management. • A track record of code running on large fleets without degrading end-user experience; you treat stability and performance as product features, and you understand enterprise deployment realities (MDM profiles, notarization, staged rollout, auto-update). • Scripting fluency for tooling and test automation (Python, shell, or equivalent). • Clear written and verbal communication with distributed teams and, when escalations demand it, directly with customers. • Reverse engineering, malware analysis, or exploit and vulnerability research background. • Experience shipping on-device ML inference (Core ML, ONNX Runtime, llama.cpp-class runtimes) inside a resource-constrained agent. • Experience with browser extension or native-messaging integrations for telemetry capture. • Cross-platform endpoint agent experience (Windows or Linux sensors) alongside macOS.
Benefits
• Distributed workplace. While we have positions we hire for in our SF office, we also hire remotely across North America. • Own a piece of the journey. Every teammate gets meaningful equity on top of their salary. • We’ve got you covered. 90% of your medical, dental, and vision is paid by Ent. We also cover 75% for your dependents. • Take the time you need. Our flexible PTO lets you recharge, travel, or just take a breather. • Family matters. 12 weeks of fully paid maternity leave (birth, adoption, or foster) and 8 weeks fully paid paternity leave. • Live well. A $100 monthly lifestyle account to spend on what keeps you healthy and happy — fitness, wellness, learning, and more. • Set up your space. A $500 home office stipend when you join as a remote employee. • DIVERSITY & ACCOMMODATIONS • We’re committed to building a diverse, inclusive, and equitable workplace where people of all backgrounds, identities, experiences, and abilities are welcomed, valued, and supported. We recognize there is no single path to success and value nontraditional career journeys and diverse perspectives as key to building stronger, more innovative teams.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT