Principal macOS Security Researcher

A principal researcher on Huntress's Product Research team, reporting to the Manager, Product Research, who leads macOS security research that shapes the company's endpoint product. The researcher prototypes new telemetry from Apple's Endpoint Security API, reproduces attacks and detonates malware, reverse engineers malware and Apple defences such as XProtect, Gatekeeper and TCC, researches EDR evasion, tracks Apple beta releases for coverage impact, works with Detection Engineering on detectors, and speaks and writes publicly.

Huntress wants deep macOS internals knowledge, hands-on Endpoint Security API and system extension work, red team experience bypassing EDR on Macs, Swift, familiarity with ATT&CK, Sigma and YARA, and a record of turning research into shipped capability. Remote in the US.