Malware Research Engineer - Mac

About Point Wild

Point Wild provides clients with cybersecurity solutions focused on monitoring, managing, and protecting personal identities and information in the digital age. Supported by WndrCo, Warburg Pincus, and General Catalyst, the company aspires to deliver the most extensive range of cyber protection products globally, aiming to be the definitive resource for all individual cybersecurity needs now and in the future.

Role Overview

We are seeking an expert Mac Malware Researcher to lead the comprehensive analysis of complex macOS threats. This includes in-depth reverse engineering of Mach-O binaries and crafting detection strategies that integrate directly into our security offerings. This position bridges threat analysis and engineering, requiring close collaboration with detection and product teams to enhance protection for over 25 million users. As we advance our macOS security capabilities, we need a technically adept researcher who excels both in dissecting malware and communicating discoveries via blogs, papers, and conferences.

Key Responsibilities

• Analyze Mach-O binaries, malicious installation packages (PKG, DMG), and scripts to uncover spyware, backdoors, loaders, and adware functionalities.
• Create and update detection signatures, behavioral and heuristic rules, YARA signatures, ensuring swift and scalable defense mechanisms.
• Investigate macOS-specific persistence methods such as LaunchAgents, LaunchDaemons, cron jobs, and login items, alongside evasion tactics including misuse of notarization, code signing, and sandbox escapes.
• Perform advanced static/dynamic malware analysis, memory forensics, and behavioral tracking to monitor malware families, variants, and emerging attack strategies including zero-day exploits.
• Produce detailed technical reports and threat intelligence content, sharing insights with internal teams and external audiences through blogs, whitepapers, and industry events.
• Collaborate with detection engineering and product units to convert research findings into tangible enhancements in macOS security measures.

Candidate Profile

• 3 to 5 years of practical experience analyzing Mac malware, proficient in reverse engineering with tools like Hopper, IDA Pro, Ghidra, and LLDB.
• Extensive understanding of macOS operating system internals and security frameworks, including Gatekeeper, XProtect, SIP, TCC, as well as expertise in Mach-O file structures and DYLD dynamic linking.
• Strong programming skills in C, C++, Objective-C, and Swift, along with familiarity in shell scripting (bash, zsh) and Python.
• Demonstrable experience in authoring YARA rules and heuristic signatures with proven detection effectiveness.
• Well-versed in macOS network communications, command and control channels, and persistence strategies.

Why Join Point Wild?

• Engage in solving authentic cyber protection challenges tailored for consumers.
• Experience direct impact from your individual contributions in a fast-moving, agile company.
• Advance your professional development with opportunities to explore new technologies and markets in a growth-driven environment.
• Collaborate with skilled peers within an inclusive workplace culture that values diversity, equality, and deep respect for all individuals.

Equal Opportunity Statement

We are committed to providing an equitable and harassment-free work environment regardless of race, color, ancestry, national origin, religion, age, gender, marital status, sexual orientation, gender identity, disability, or veteran status. Point Wild fosters a welcoming community that removes barriers for all employees and applicants.