Remote Endpoint Security Engineer — Data Protection

Ent; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Distributed workplace

Equity on top of salary

Medical, dental, and vision coverage

Flexible PTO

Maternity/Paternity leave

Lifestyle stipend

Home office stipend

Job summary

Ent is hiring an Endpoint Engineer to own the data-protection layer on the device, classifying sensitive data and enforcing policy at egress. The role combines content inspection with Ent's on-device small language model to reflect user intent, not just file content.

You will build data lineage, provenance tracking, and interception plumbing across Windows, macOS, Linux, and browser hooks, while prioritizing performance and low impact on user workflows.

Qualifications

• 5+ years shipping production systems software in C/C++ for enterprise endpoints.
• Experience with endpoint data-security or CASB/SASE products is required.
• Strong knowledge of OS internals and interception mechanisms.

Responsibilities

• Build the endpoint data-protection layer of the Ent agent and enforce egress policies.
• Instrument and control exfiltration channels including USB, printing, clipboard, and network uploads.
• Implement on-device content inspection, classification, and OCR for images.
• Integrate on-device LLMs to align classification with user intent.
• Develop data lineage and provenance tracking for content.

Skills

C/C++ development

Endpoint software

Enterprise scale

OS internals

Content inspection

Data classification

Multi-threaded performance

Debugging skills

Communication

Job description

Ent is hiring an Endpoint Engineer to own the data-protection layer on the device, classifying sensitive data and enforcing policy at egress. The role combines content inspection with Ent's on-device small language model to reflect user intent, not just file content.

You will build data lineage, provenance tracking, and interception plumbing across Windows, macOS, Linux, and browser hooks, while prioritizing performance and low impact on user workflows.