Senior Endpoint Engineer, Data Security

The role

The Senior Endpoint Engineer will build the endpoint data-protection layer of the Ent agent. This includes classifying sensitive data, tracing data movement, and enforcing policy at the moment of egress.

What you will do

• Build the endpoint data-protection layer of the Ent agent
• Instrument and control the full set of exfiltration channels
• Implement on-device content inspection and classification
• Integrate Ent's on-device small language model into classification and intent decisions
• Build data lineage and provenance tracking
• Implement or work with team members to the interception plumbing
• Drive precision as a first-class metric
• Keep inspection cost invisible to the user
• Produce forensically useful incident evidence
• Own customer escalations on missed egress paths and application-compatibility conflicts

Required qualifications

• 5+ years shipping production systems software in C/C++
• Work on an endpoint agent deployed at enterprise scale
• Direct experience building or operating an endpoint for insider-risk, data-security, or CASB/SASE data-protection product
• Strong operating system internals knowledge on at least one platform: file system filtering, process and handle interception, and the user/kernel boundary
• Hands-on content inspection and data classification work: pattern-based detection, fingerprinting and hashing schemes, file format parsing, and handling of archives and Office/PDF container formats
• Experience controlling device and network egress channels — USB and removable media, print, clipboard, HTTPS upload
• Multi-threaded, performance-sensitive engineering against measured latency and throughput budgets
• Strong debugging and profiling skills on real user machines
• A precision mindset
• Clear written and verbal communication with distributed teams and customer-facing stakeholders

Nice to have

• OCR, ML-based classification, or embedding and LLM-based content understanding applied to data protection
• Implementation experience with data lineage or provenance tracking
• Cross-platform development spanning Windows and macOS (Linux a plus)
• Browser extension development
• Encryption, rights management, or key handling on the endpoint
• Depth in regulatory compliance and audit-evidence design
• Insider-threat investigation workflows, or data governance for AI tools and autonomous agents

Benefits

• Meaningful equity on top of salary
• 90% of medical, dental, and vision is paid by Ent
• 75% coverage for dependents
• Flexible PTO
• 12 weeks of fully paid maternity leave (birth, adoption, or foster)
• 8 weeks fully paid paternity leave
• $100 monthly lifestyle account for fitness, wellness, learning, and more
• $500 home office stipend for remote employees

About the company

Ent is the intent-aware workspace security platform for securing human and AI-driven work. It is in production with Global 2000 customers across hospitality, financial services, and defense.