Senior Threat and Detections Researcher

At Jamf, people are at the core of everything we do. We do what’s right for our customers, our employees, our communities and our world. We take pride in simplifying technology for tens of thousands of customers around the globe and helping organizations succeed with Apple.

 

Jamf offers remote and hybrid positions. Depending upon the role, work in the office, connect 100% remote from your home, or find the blend that works best for you.

 

What you’ll do at Jamf:
The Senior Threat and Detections Researcher focuses on finding new ways to detect malicious activity inside of Jamf customer environments. Using various existing technologies as well as in-house tooling they will create new and innovative ways to lead threat research in the macOS space. From the monitoring of indicators of compromise to the creation of the more experimental behavioral based detections, researchers will have access to cutting-edge technology only found within the Jamf Threat Labs team. At the senior level the hired employee is expected to help train other members on the team on all responsibilities and skillsets listed below.

What you can expect to do in this role:

• Write and manage host based macOS detections at the endpoint level
• Perform analysis of detections to determine accuracy and precisions and tune detections accordingly based on results
• Research new ways to detect malicious activity on macOS using a wide variety of custom-built tooling
• Manage malware signatures to detect known threats on the macOS platform.
• Stay up to date on the latest malware trends on macOS and design detections accordingly
• Development of tools using python or other scripting languages to assist in day to day tasks
• Research macOS system internals to find and report new vulnerabilities
• Develop public facing material for important research developed while investigating newly discovered malware techniques and system internal findings
• Train others on system internals and malware signature development
• Assists in the management, organization, and prioritization of team efforts and goals
• Serves as a technical resource for the team with regards to best practices and technical approach
• Builds a deep understanding of workflows that make Jamf customers successful and apply that knowledge to ensuring the quality of each release 

What we are looking for:

• Minimum 5 years experience in cyber security and intrusion detection (Required)
• Minimum 5 years experience with endpoint detection software (Required)
• Minimum 3 years experience in incident response (Required)
• Experience with static and dynamic reverse engineering (Required)
• Strong interest in macOS security (Required)
• Strong experience with detecting malware using Yara rules
• Experience with scripting or programming languages such as Bash, Python, Ruby, Objective-C or Swift
• Experience with GitHub and Git
• Customer value focus with the ability to quickly iterate based on emerging threats and customer feedback.
• Solution focused ability working collaboratively in a fast-paced, agile environment
• High school Diploma /GED (Required)
• 4 year / Bachelor's Degree (Preferred)
• A combination of relevant experience and education may be considered

Why Jamf?

• Our developers work in agile delivery teams to produce new features, improve software components, and are the subject matter experts for our Jamf product offerings.

• You will have the opportunity to make a real and meaningful impact for more than 70,000 global customers with the best Apple device management solution in the world.

• We constantly push the boundaries of technology, our developers support new innovations and OS releases the moment they are made available by Apple.

• Several Jamf engineers are named in patents and with team names like CatDog, ThunderSnow and Dalek you can expect to have some fun while building cutting-edge software.

• You will have the opportunity to work with a small and empowered team where the culture is based on trust, ownership, and respect.

 

JAMF is an equal opportunity employer and does not discriminate with regard to race, color, national origin, age, religion, disability, gender, sexual orientation, gender identity, genetic information, familial status, marital status, military status, or any other characteristics protected by federal, state, and local applicable fair employment practices laws.

The requirements and demands in this description represent those that must be met by an employee to successfully perform the functions of this job.  This is not intended t