Senior Endpoint Engineer, Data Security
Ent · Remote · Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior level role
- Fully remote (NA)
- C/C++ expertise
- OS internals focus
- Equity included
You will own the endpoint data-protection layer of the Ent agent, focusing on classifying sensitive data and tracing its movement. The work combines classic content inspection with on-device small language models to enforce security policies based on user intent at the moment of egress.
The team builds tools that protect against data exfiltration across various channels, including AI agents and traditional methods. You will ensure high precision in detection while maintaining invisible performance costs for users.
What you'll do
- Build the endpoint data-protection layer to classify sensitive data and enforce egress policies.
- Control exfiltration channels such as USB, clipboard, screen capture, and AI tool interfaces.
- Implement on-device content inspection using regex, fingerprinting, and OCR techniques.
- Integrate on-device small language models to determine user intent during classification.
- Develop data lineage tracking to maintain classification as content is transformed or moved.
- Utilize Windows minifilters, macOS Endpoint Security, and Linux eBPF for interception.
- Optimize CPU, memory, and I usage to keep inspection costs invisible to the user.
- Produce forensically useful evidence for incident investigations and compliance reporting.
What you'll need
- 5+ years shipping production systems software in C/C++ at enterprise scale.
- Direct experience building endpoint agents for insider-risk or data-security products.
- Strong knowledge of OS internals, including file system filtering and process interception.
- Hands-on experience with content inspection, pattern detection, and file format parsing.
- Experience controlling device and network egress channels like USB and HTTPS uploads.
- Ability to engineer multi-threaded, performance-sensitive systems with latency budgets.
- Strong debugging skills for application-compatibility issues on real user machines.
- Clear communication skills for working with distributed teams and stakeholders.
Nice to have
- Experience with OCR, ML-based classification, or LLM-based content understanding.
- Implementation experience with data lineage or provenance tracking systems.
- Cross-platform development skills spanning Windows, macOS, and Linux.
- Knowledge of encryption, rights management, or key handling on endpoints.
- Depth in regulatory compliance standards such as GDPR, HIPAA, or PCI DSS.
- Experience with insider-threat investigation workflows or AI data governance.
Stack
- C
- C++
- Windows Minifilters
- ETW
- macOS Endpoint Security Framework
- Linux fanotify
- eBPF
- OCR
How you'll work
- Distributed workplace with remote hiring across North America.
- Flexible PTO policy allowing time for recharge and travel.
- $500 home office stipend provided upon joining as a remote employee.
What you get
- Meaningful equity ownership for every teammate.
- 90% coverage for medical, dental, and vision insurance.
- 75% coverage for dependents' health insurance plans.
- 12 weeks fully paid maternity leave for birth, adoption, or foster.
- 8 weeks fully paid paternity leave.
- $100 monthly lifestyle account for wellness and learning expenses.