Senior Endpoint Engineer, EDR (linux)
Ent · Remote · Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior level role
- Fully remote (NA)
- C/C++ or Rust
- eBPF & Linux internals
- Equity + Benefits
You will own the Linux sensor at the core of Ent's endpoint detection and response capability. The work involves designing kernel and user-mode components that observe system activity and convert it into high-fidelity intent signals.
The team builds detection and prevention across workstations, servers, containers, and cloud workloads. You will balance detection efficacy with performance, ensuring the agent remains lightweight while stopping malicious activity.
What you'll do
- Design and ship kernel and user-mode components for the Linux agent
- Build end-to-end EDR detection and prevention capabilities
- Instrument telemetry using eBPF, LSM, and audit subsystems
- Harden the agent against tampering, bypass, and evasion techniques
- Optimize CPU, memory, and I/O usage under high event loads
- Resolve high-severity customer escalations involving crashes or hangs
- Mentor engineers and share ownership of release quality
What you'll need
- 10+ years building production systems software in C/C++ or Rust
- Deep knowledge of OS internals including memory management and IPC
- Hands-on production experience with eBPF
- Experience building or operating EDR, EPP, XDR, or AV products
- Strong understanding of attacker TTPs and raw telemetry analysis
- Expertise in low-level debugging and crash-dump analysis
- Proficiency in multi-threaded and concurrent programming
- Scripting fluency in Python or equivalent for automation
Nice to have
- Production experience with kernel-mode drivers or extensions
- Background in reverse engineering or malware analysis
- Experience with anti-tamper and code integrity mechanisms
Stack
- C/C++
- Rust
- eBPF
- LSM
- Linux
- Python
How you'll work
- Fully remote within North America
- Distributed team environment
What you get
- Meaningful equity package
- 90% medical, dental, and vision coverage
- Flexible PTO policy
- 12 weeks paid maternity leave
- 8 weeks paid paternity leave
- $100 monthly lifestyle account
- $500 home office stipend