Offensive Security Engineer - macOS

Description

NetSPI is a dynamic cyber security company headquartered in Minneapolis. We are the global leader in offensive security, delivering the most comprehensive suite of penetration testing, attack surface management, and breach and attack simulation solutions. Our global cybersecurity experts are committed to securing the world’s most prominent organizations, including nine of the top 10 U.S. banks, four of the top five leading cloud providers, four of the five largest healthcare companies, three FAANG companies, seven of the top 10 U.S. retailers & e-commerce companies, and many of the Fortune 500.

NetSPI is constantly growing and looking for innovative minds to join us in helping some of the largest organizations in the world protect their technology and data from cyber criminals. We are on an exciting journey to redefine the offensive security market with a platform driven approach that will address our customers’ most pressing security challenges. If you thrive in a collaborative setting and enjoy working with best-in-class technology – we want to meet you!

Join the mission as an Offensive Security Engineer. In this role, you will be working on the Breach and Attack Simulation team at NetSPI. You will be responsible for designing, developing, and maintaining components and modules associated with the Breach and Attack Simulation platform. NetSPI’s Breach and Attack Simulation Platform provides customers with the means to keep up to date with emerging attack techniques, simulate attacker behavior, and monitor/measure their ability to detect those behaviors over time. **

Responsibilities**

• Designing, developing, and maintaining Breach and Attack Simulation Platform components and modules.
• Working with a geographically distributed team of various experience levels.
• Delivering high quality technical solutions to stakeholders in a fast-paced environment.
• Developing solutions in accordance with industry standards and best practices.

Minimum Qualifications

• Strong experience with macOS systems programming (examples: Objective C, Swift, Python, Go).
  • 2-5 years ideally.
• Strong understanding of the macOS operating system and subsystems such as:
  • Transparency, Consent, and Control (TCC)
  • System Integrity Protection (SIP)
  • Inter-process Communication (XPC)
  • JavaScript for Automation (JXA)
• The ability to work with undocumented macOS functions comfortably.
• Familiarity with macOS Debuggers.
• Knowledge of common security flaws and mitigations as published by OWASP, SANS, etc.
• Offensive security experience.

Preferred Qualifications

• Experience with Linux API program.
• Command & Control (C2) Development.
• Experience with C#/.NET.
• Exploit Development.
• OSMR Certification
• Familiarity with ARM / Apple Silicone architecture

About the Organization NetSPI is a fast-growing, dynamic cybersecurity company headquartered in the North Loop of Minneapolis. As the leader in vulnerability orchestration and security testing, we're continually growing, and we pride ourselves on keeping absolutely current and cutting-edge in everything we do.