Jamf
Senior Application Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Jamf
Jamf is a software company based in Eau Claire, Wisconsin, founded in 2002. It specializes in Apple device management and endpoint protection solutions, aiming to simplify the deployment, management, and security of Apple devices while preserving the native user experience. The company's flagship product, Jamf Pro, is a mobile device management system tailored for Apple devices, allowing IT and security teams to manage and secure Macs, iPads, iPhones, and Apple TVs efficiently. Jamf has expanded its offerings to include Jamf Connect for authentication, Jamf School for education-focused management, and various endpoint security tools. With a customer base of over 76,600 organizations worldwide, Jamf supports more than 33.6 million Apple devices across various sectors, including education, enterprise, healthcare, and creative industries. Jamf has experienced significant growth, including a successful IPO on Nasdaq in 2020, and continues to innovate with compatibility for new Apple software releases and enhanced security features.
Security at Jamf
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Section 1: AppSec Philosophy & Stated Priorities ("The Thoughts") Stated AppSec Mission: "Jamf has a dedicated product security team that tests for and resolves product security issues."– Jamf Trust Center (https://www.jamf.com/trust-center/information-security/), Webpage, Developer Enablement vs. Gatekeeping: "Jamf's engineering team follows a secure software development lifecycle policy"– Jamf Trust Center (https://www.jamf.com/trust-center/information-security/), Webpage”
Key Initiatives
Section 3: AppSec Initiatives & Workflows ("The Initiatives") Security Champions Program: Status: No Evidence Found. - Information not publicly available. "Shift Left"in Practice: - Evidence of static/dynamic scanning integrated into builds: "dynamic and static automated security scans are performed on builds."– Jamf Trust Center (https://www.jamf.com/trust-center/information-security/), Webpage
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.