Senior Threat and Detections Researcher

What you'll do at Jamf:

The Senior Threat and Detections Researcher focuses on finding new ways to detect malicious activity inside of Jamf customer environments. Using various existing technologies as well as in-house tooling they will create new and innovative ways to lead threat research in the macOS space. From the monitoring of indicators of compromise to the creation of the more experimental behavioral based detections, researchers will have access to cutting-edge technology only found within the Jamf Threat Labs team. At the senior level the hired employee is expected to help train other members on the team on all responsibilities and skillsets listed below.

This role if offered as remote in Minneapolis, MN; Eau Claire, WI; and Austin, TX. You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter. We are only able to accept applications in Minneapolis, MN; Eau Claire, WI; and Austin, TX.

What you can expect to do in this role:

• Write and manage host based macOS detections at the endpoint level
• Perform analysis of detections to determine accuracy and precisions and tune detections accordingly based on results
• Research new ways to detect malicious activity on macOS using a wide variety of custom-built tooling
• Manage malware signatures to detect known threats on the macOS platform.
• Stay up to date on the latest malware trends on macOS and design detections accordingly
• Development of tools using python or other scripting languages to assist in day to day tasks
• Research macOS system internals to find and report new vulnerabilities
• Develop public facing material for important research developed while investigating newly discovered malware techniques and system internal findings
• Train others on system internals and malware signature development
• Assists in the management, organization, and prioritization of team efforts and goals
• Serves as a technical resource for the team with regards to best practices and technical approach
• Builds a deep understanding of workflows that make Jamf customers successful and apply that knowledge to ensuring the quality of each release
• #LIRemote

What we are looking for:

• Minimum 5 years experience in cyber security and intrusion detection (Required)
• Minimum 5 years experience with endpoint detection software (Required)
• Minimum 3 years experience in incident response (Required)
• Experience with static and dynamic reverse engineering (Required)
• Strong interest in macOS security (Required)
• Strong experience with detecting malware using Yara rules
• Experience with scripting or programming languages such as Bash, Python, Ruby, Objective-C or Swift
• Experience with GitHub and Git
• Customer value focus with the ability to quickly iterate based on emerging threats and customer feedback.
• Solution focused ability working collaboratively in a fast-paced, agile environment
• High school Diploma /GED (Required)
• 4 year / Bachelor's Degree (Preferred)
• A combination of relevant experience and education may be considered

SECURITY AND PRIVACY REQUIREMENTS

• Participation in ongoing security training is mandatory
• Established security protocols will be adhered to, sensitive data will be handled responsibly, and data protection practices are followed, including understanding relevant privacy regulations and reporting breaches
• Acknowledging the Jamf Code of Conduct, where applicable security and privacy policies can be found, is a requirement of all roles at Jamf

How we help you reach your best potential:

• 
  

  Named a 2024 Best Companies to Work For by U.S. News

  
  
• 
  

  Named a 2024 Newsweek America's Greatest Workplaces for Parents & Families

  
  
• 
  

  Named a 2024 PEOPLE Companies That Care by PEOPLE and Great Place To Work

  
  
• 
  

  Named a 2023 Best Workplaces for Women by Great Place to Work and Fortune Magazine

  
  
• 
  

  We know that big ideas can come from anyone, so we empower everyone to make an impact. Our 90% employee retention rate agrees!

  
  
• 
  

  You will have the opportunity to make a real and meaningful impact for more than 70,000 global customers with the best Apple device management solution in the world.

  
  
• 
  

  We put people over profits - which is why our customers keep coming back to us.

  
  
• 
  

  Our volunteer time off allows employees to support and give back to our communities.

  
  
• 
  

  We encourage you to simply be you. We constantly seek and value different perspectives to ensure Jamf is a place where everyone feels comfortable and can be successful.

  
  
• 
  

  22 of 25 world's most valuable brands rely on Jamf to do their best work (as ranked by Forbes).

  
  
• 
  

  Over 100,000 Jamf Nation users, the largest online IT community in the world.