Remote Windows EDR Engineer (Endpoint Security)

Ent; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Distributed workplace across North Am.

Equity on top of salary

Medical, dental, vision coverage

Flexible PTO

Maternity/Paternity leave

Lifestyle account $100/mo

Home office stipend $500

Job summary

Ent is hiring an Endpoint Engineer, EDR to design and ship kernel- and user-mode components on Windows. You will turn observed activity into high-fidelity signals and own end-to-end EDR detection and prevention capabilities.

The role requires deep OS internals knowledge, experience with kernel callbacks/minifilters, and strong debugging skills. You will work with cross-functional teams and help drive sensor performance on large fleets.

Qualifications

• 10+ years building production C/C++ systems software
• Deep OS internals knowledge: processes, memory, file systems, IPC
• Experience with kernel callbacks and minifilters
• Experience in EDR/AV or detection-and-response
• Strong debugging and performance analysis skills
• Low-level programming for high-scale fleets
• Scripting in Python; automation and tooling

Responsibilities

• Design, build, and ship kernel- and user-mode components for Windows EDR
• End-to-end detection, instrumentation, and on-box correlation
• Ensure sensor operates within CPU, memory, and I/O budgets
• Collaborate with security research, AI, platform, and product teams
• Build test harnesses and regression coverage
• Mentor engineers and contribute to release quality

Skills

C/C++

OS internals

Kernel callbacks

Minifilters

EDR experience

Debugging

Multithreading

Python scripting

Communication

Performance

Tools

ETW

Crash dumps

Job description

Ent is hiring an Endpoint Engineer, EDR to design and ship kernel- and user-mode components on Windows. You will turn observed activity into high-fidelity signals and own end-to-end EDR detection and prevention capabilities.

The role requires deep OS internals knowledge, experience with kernel callbacks/minifilters, and strong debugging skills. You will work with cross-functional teams and help drive sensor performance on large fleets.