macOS Security Hardening & Remediation Specialist - 2026-52

emergiTEL

28d • Remote

About The Position

emergiTEL is hiring a macOS Security Hardening & Remediation Specialist for our client in the financial services industry. This is a 3-month contract role. The position focuses on macOS security hardening, remediation, and compliance across enterprise environments.

Requirements

• Deep understanding of macOS security mechanics (e.g., FileVault, TCC/Privacy Preferences Policy Control, System Extensions, Gatekeeper).
• Advanced experience with Apple-centric MDM/UEM platforms, preferably Jamf Pro, including building configuration profiles and managing smart groups.
• Strong scripting skills in Zsh / Bash and experience utilizing the macOS command-line interface for security auditing.
• Experience implementing the macOS Security Compliance Project (mSCP) or CIS Benchmarks for macOS.
• 5+ years of experience in Cybersecurity, Endpoint Engineering, or Infrastructure Security with a heavy focus on Configuration Management.
• Proven track record of participating in large-scale enterprise remediation projects or compliance lifecycles.
• Solid understanding of ports, protocols, and services management to support the project's network-layer scope.
• Ability to translate complex compliance documents (like the Q2 Governance Standard) into technical, actionable engineering requirements.
• Strong documentation skills for creating hardening standards, change management plans, and remediation playbooks.

Responsibilities

• Conduct a deep-dive gap analysis of the current macOS fleet against Cybersecurity Governance Hardening Standards.
• Work with subject matter experts, security, and governance teams to derive hardened configuration baseline documentation in alignment with the Configuration Hardening Standard.
• Design, test, and deploy configuration profiles, configuration files, and shell scripts to enforce strict compliance.
• Align macOS endpoint controls with specialized software layers, ensuring secure port/protocol management and application-level hardening.
• Manage the orchestration of security configuration updates across all macOS devices using modern workflows.
• Work alongside the Apple Engineering team, DevOps/Developers (if applicable), and Cybersecurity Governance to balance rigid security with user productivity.
• Deliver training, testing, and documentation including hardening standards, change management plans, and remediation playbooks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed