Principal macOS Security Researcher (macOS)

Location: Remote within the United States

Salary: $215,000–$225,000 USD base salary annually, plus bonus and equity.

Company

hirify.global provides enterprise-grade cybersecurity technology supported by a 24/7 human-led Security Operations Center, protecting businesses and managed service providers worldwide.

What you will do

• Lead research initiatives for macOS security product strategies, technologies, prevention, hardening, and detection.
• Identify and prototype telemetry from Apple’s Endpoint Security API and other macOS subsystems.
• Reproduce attacks, detonate malware, exploit vulnerabilities, and research offensive techniques including EDR evasion.
• Reverse engineer macOS malware and Apple security frameworks such as XProtect, Gatekeeper, and TCC.
• Build proof-of-concept capabilities, ephemeral research environments, attacker infrastructure, and detection improvements.
• Document findings, collaborate with Detection Engineering, Product, and Engineering, mentor colleagues, and contribute to public technical content.

Requirements

• Deep expertise in macOS internals, including its security model, code signing, notarization, TCC, SIP, persistence, and Mach-O.
• Hands-on experience with Apple’s Endpoint Security API and system extension development.
• Expertise in macOS threats, malware, red teaming, attack emulation, and EDR bypass research.
• Proficiency with Swift; familiarity with Go, Python, or Ruby is preferred.
• Experience with MITRE ATT&CK, Sigma, YARA, Elasticsearch, and Kibana, plus a track record of taking research from concept to shipped capability.
• Ability to analyze Apple documentation and frameworks, document research clearly, and evaluate high-value telemetry requirements.

Nice to have

• Experience with macOS fleet management, including MDM, configuration profiles, and mobileconfig deployment.
• Understanding of SMB IT automation tools such as PSAs and RMMs.
• Reverse-engineering experience with Mach-O binaries and scripted payloads using Binary Ninja, IDA Pro, Hopper, or Ghidra.

Culture & Benefits

• 100% remote work environment.
• Paid vacation, sick time, holidays, and 12 weeks of paid parental leave.
• Medical, dental, vision, life, and disability insurance plans.
• 401(k) contribution of 5% regardless of employee contribution and stock options for full-time employees.
• $500 home-office reimbursement, annual professional development assistance, and $75 monthly digital reimbursement.
• Access to BetterUp for personal and professional coaching.

Hiring process

• Applications may be supported by AI-assisted resume screening, skills assessment, and candidate matching, with final decisions made by human recruiters.