Senior Endpoint Security Engineer - Kernel & AI-Driven Defense

Mimecast; Minneapolis (MN); On-site; USD 148,000 - 222,000; Full time

Job summary

Mimecast is seeking a Senior Software Engineer for Endpoint Sensor to design and implement kernel-level drivers and security extensions across Windows, macOS, and Linux. You’ll own features from concept to production at scale, with a security-first approach and collaboration with product and cloud teams.

You will work in an AI-first engineering environment, focusing on protecting data and insider risk while maintaining performance and reliability on millions of endpoints.

Qualifications

• Production software experience with low-level/endpoint development.
• Proficiency in Windows kernel mode (minifilters, drivers, WFP) or macOS Endpoint Security frameworks.
• Strong C++ fundamentals with memory, concurrency and performance considerations.
• Experience designing extensible architectures with stable interfaces.
• Security-minded: considers evasion and insider risk beyond external threats.
• Experience with real-time enforcement in always-on endpoint software.
• Cross-platform development across Windows, macOS, and Linux.
• Familiarity with network-layer monitoring and TLS analysis.

Responsibilities

• Design and develop core capabilities for Windows, macOS, and Linux agents throughout the complete SDLC.
• Build kernel-mode components and Endpoint Security/Network extensions with high performance.
• Create real-time inline enforcement to deny/block decisions without harming endpoint performance.
• Own features end to end from research to production at scale and integrate with backend workflows.
• Maintain always-on components with strong observability, performance, and stability.
• Adopt a security-first mindset to resist evasion and treat input as untrusted.
• Collaborate with product and cloud teams to translate discoveries into capabilities for real-world security investigations.

Skills

Low-level endpoint development

Windows kernel mode

macOS Endpoint Security

C++ fundamentals

Security-minded development

Cross-platform development

Job description

Mimecast is seeking a Senior Software Engineer for Endpoint Sensor to design and implement kernel-level drivers and security extensions across Windows, macOS, and Linux. You’ll own features from concept to production at scale, with a security-first approach and collaboration with product and cloud teams.

You will work in an AI-first engineering environment, focusing on protecting data and insider risk while maintaining performance and reliability on millions of endpoints.