Endpoint Data Security Engineer

Ent; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision

Flexible PTO

Parental leave

Wellness stipend

Home office stipend

Job summary

Ent is seeking an Endpoint Engineer to own the data protection layer on the device, classifying sensitive data and enforcing policy at egress, including AI tools. This role blends traditional content inspection with Ent’s on-device small language model to reflect user intent, not just file contents.

You’ll work across Windows, macOS, Linux, and browser extensions, optimizing performance and building data lineage while aligning with GDPR/HIPAA/PCI guidance.

Qualifications

• 5+ years shipping production systems software in C/C++, including enterprise endpoints.
• Experience building or operating endpoint for insider-risk or data protection.
• Strong OS internals knowledge: file systems, interception, user/kernel boundary.
• Hands-on content inspection, data classification, and file format parsing.
• Experience controlling device/network egress channels (USB, printing, HTTPS upload).
• Multi-threaded, performance-sensitive engineering with latency budgets.
• Clear written and verbal communication with distributed teams.

Responsibilities

• Build the endpoint data-protection layer: classify data and enforce egress policy.
• Instrument and control exfiltration channels across USB, printing, clipboard, and more.
• Implement on-device content inspection with regex, fingerprinting, and OCR.
• Integrate on-device LLM into classification decisions reflecting user intent.
• Develop data lineage tracking from copy/rename/transformation to retention.
• Work with Windows, macOS, Linux ecosystems and browser hooks for interception.
• Tune detectors, measure false positives/negatives, and improve accuracy.
• Produce forensic evidence for investigations and compliance reporting.

Skills

C/C++

Endpoint security

OS internals

Content inspection

Data classification

Performance optimization

Debugging

Distributed teams

Tools

Windows minifilters

ETW

macOS Endpoint Security Framework

Network Extensions

Linux fanotify

eBPF

Browser extension hooks

Job description

Ent is seeking an Endpoint Engineer to own the data protection layer on the device, classifying sensitive data and enforcing policy at egress, including AI tools. This role blends traditional content inspection with Ent’s on-device small language model to reflect user intent, not just file contents.

You’ll work across Windows, macOS, Linux, and browser extensions, optimizing performance and building data lineage while aligning with GDPR/HIPAA/PCI guidance.