Senior/Staff Software Development Engineer - macOS Endpoint
BeyondTrustResponsibilities
- Design, build, and own the macOS Endpoint Security client for process, file, signal, and synchronous authorization events.
- Build and operate the userspace agent that installs and drives the System Extension.
- Own event capture, policy evaluation, and real-time deny decisions within Apple's authorization deadline.
- Improve enforcement-path latency through process enrichment, code-signature and hash caching with eviction, and process-ancestry resolution.
- Extend enforcement with a Network Extension content filter for socket- and flow-level policy using shared identity and process context.
- Ensure stability and portability across macOS versions, Apple Silicon, and Intel, including capability drift, TCC, entitlements, activation, approval, and graceful degradation.
- Collaborate with Linux, Windows, and policy-backend engineers on shared policy semantics, event schemas, conformance, and the common Rust agent.
- Represent macOS in cross-organization architecture reviews and communicate tradeoffs to technical and non-technical stakeholders.
- Own delivery from design through production, raise engineering quality, and mentor senior and mid-level macOS engineers.
Requirements
- Deep production experience with macOS system internals, including Endpoint Security, System and Network Extensions, code signing, notarization, launchd, XPC, TCC, and entitlements.
- Systems programming experience in C, C++, Objective-C, Swift, or Rust.
- Hands-on experience building Endpoint Security enforcement systems, including synchronous authorization events and allow/deny verdict handling within Apple's deadline.
- Experience building and deploying System Extensions, including activation, user approval, MDM-managed deployment, entitlement provisioning, code signing, and notarization.
- Understanding of macOS isolation and security technologies including App Sandbox, TCC, and SIP.
- Experience with lldb, Instruments, dtrace, unified logging through log and Console, and spindump.
- 8+ years of systems-level software engineering experience with substantial macOS system software depth.
- Demonstrated use of AI-first development workflows, including Claude Code or a comparable tool, with judgment to verify security-critical code manually.
- Working knowledge of systems design patterns and tradeoffs at the OS-enforcement boundary.
- Full-lifecycle product release experience in an agile environment.
- Technical leadership experience on complex, ambiguous, cross-team initiatives.
H1B sponsorship
Sponsorship for this role is unconfirmed.
BeyondTrust’s past filings provide context. They do not guarantee sponsorship for a current opening.
H1B petition approvals by fiscal year
- FY 20254
0 initial/new employment approvals · 2 changes of employer
Counts are petitions, including continuing employment and amendments, rather than unique hires. Source: USCIS
Job fields receiving H1B certifications
- Software Developers1 · 33%
- Information Technology Project Managers1 · 33%
- Database Architects1 · 33%
Job fields come from government occupation codes, rather than internal departments. Counts are certified Labor Condition Applications, not visa approvals or unique hires. Withdrawn and denied cases are excluded.
Source: US Department of LaborMatched government employer: BEYONDTRUST CORPORATION
About BeyondTrust
BeyondTrust is the global cybersecurity leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders. BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.