This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Attacks begin on the endpoint—it’s where an intruder first lands, runs malware, and moves laterally across a network. It’s also where their activity can be observed most clearly in real time. The Microsoft Defender for Endpoint (MDE) client for macOS runs directly on our enterprise customers’ Macs, continuously monitoring processes, files, and system events. It blocks threats on the device and transforms what it observes into high-fidelity signals that power investigation and response across Microsoft Security. Operating across diverse macOS versions and large enterprise fleets—without negatively impacting device performance—is a complex systems challenge. The agent runs close to the operating system using system extensions and the Endpoint Security Framework, integrating deeply with the macOS security model to extend and enhance the protections our customers already rely on. We are looking for a Software Engineer II and a Senior Software Engineer who are passionate about building fast, reliable, native systems software and want to shape a macOS product that protects enterprise environments against real-world attacks. Our team's engineers have the opportunity to influence technical direction, own the architecture of major features and subsystems, and elevate the engineers around them.
Job Responsibility
Build and improve detection, OS event monitoring, telemetry, and reporting in the on-device agent
Develop native components that detect and respond to real-world endpoint threats
Design, deliver, and maintain components with a focus on reliability, performance, and operational health
Help ensure the agent remains efficient, safe, and aligned with the macOS security model
Contribute to performance, concurrency, and compatibility across macOS versions
Produce high-quality telemetry that supports investigation, analytics, and security insights
Investigate and resolve issues such as crashes, performance regressions, and compatibility challenges
Apply secure coding practices and validate assumptions to build resilient systems
Collaborate with engineers and partner teams to deliver integrated security solutions
Contribute to design discussions, code reviews, and shared engineering practices
Embody our culture and values.
Requirements
Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
OR equivalent experience
Ability to meet Microsoft, customer, and/or government security screening requirements
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years.
Nice to have
Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
OR equivalent experience
4+ years building and shipping systems-level or native software in C/C++ or Objective-C
Experience with macOS, Linux, or other Unix internals: system extensions, the Endpoint Security Framework (ESF), kernel/user-mode boundaries, or equivalent low-level OS work
Background in security, endpoint protection, EDR/antivirus, networking client software (e.g., VPN), or performance-sensitive systems software
Experience with multithreaded/asynchronous code and diagnosing concurrency or performance issues
Interest in security, systems programming, or endpoint detection and response