Ent
Senior Endpoint Engineer, Data Security
Remote · Remote · Senior · Full-time · Posted Sep 4, 2026
- Experience
- 5+ years; no stated alternative.
About the job
Build and maintain endpoint data-protection systems that classify sensitive data, track its movement, and enforce security policies across device and network egress channels, including AI tools.
What you'll do
- Develop endpoint data classification, lineage tracking, and egress controls across device, network, browser, and AI channels.
- Implement content inspection and operating-system interception, while measuring detection precision and keeping scanning performant.
- Investigate customer escalations and compatibility issues; produce incident evidence and partner on regulatory controls.
What they ask for
- 5+ years shipping production systems software in C/C++, including an enterprise-scale endpoint agent.
- Direct experience with an endpoint insider-risk, data-security, or CASB/SASE data-protection product.
- Strong operating-system internals knowledge on at least one platform, including file-system filtering, process and handle interception, and the user/kernel boundary.
- Hands-on content inspection and data classification experience, including pattern detection, fingerprinting and hashing, file parsing, and archives and Office/PDF containers.
Nice to have
- OCR, ML-based classification, or embedding and LLM-based content understanding for data protection.
- Data lineage or provenance tracking implementation experience.
Tools
C/C++, Windows minifilters, ETW, macOS Endpoint Security Framework, Network Extensions, Linux fanotify, eBPF, OCR
AI focus
Integrate an on-device small language model into data classification and intent decisions, and enforce policies for egress to AI tools and agents.
Model-written summary · the original posting is authoritative