Endpoint Engineer, Data Security

Job not on LinkedIn

🔥 14 minutes ago

🏈 North America – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚰 Data Engineer

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ENT

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2001

💼 Consulting

🤝 Non-profit

🔬 Science

Consulting • Non-profit • Science

ENT is a socio‑economic initiative made up of two organizations (a consultancy and a foundation) that deliver multidisciplinary professional services focused on environmental policy, research and innovation. For more than 20 years they have worked on the design, analysis and management of environmental policies and instruments — especially waste management, environmental taxation, producer responsibility and deposit-return systems — as well as climate change, marine environment and ecology. ENT participates in R+D+i projects, publishes research, offers training and advisory services, and holds ISO 9001 and 14001 certifications.

📋 Description

• Build Ent's endpoint data-protection layer to classify sensitive data, trace its movement, and enforce policy at egress • Instrument and control exfiltration channels including USB, printing, clipboard, drag-and-drop, screen capture, network shares, Bluetooth/AirDrop, email, browser uploads, sync clients, and AI tools or agents • Implement on-device content inspection and classification using patterns, keywords, dictionaries, document matching, fingerprinting, file and structure identification, and OCR • Integrate Ent's on-device small language model into classification and intent decisions • Build data lineage and provenance tracking across copying, renaming, transformation, archiving, compression, and re-encoding • Implement interception plumbing using Windows minifilters and ETW, macOS Endpoint Security Framework and Network Extensions, Linux fanotify and eBPF, and browser extension hooks • Build labeled corpora, measure detector false-positive and false-negative rates, and tune classification quality • Budget CPU, memory, and I/O for content scanning without blocking, delaying, or corrupting legitimate workflows • Produce forensic incident evidence covering who, what data, channel, and intent • Own customer escalations involving missed egress paths and application-compatibility conflicts, converting recurring patterns into permanent fixes • Partner with product, security research, AI, and compliance stakeholders to map endpoint controls to GDPR, HIPAA, PCI DSS, CCPA, and export-control requirements

🎯 Requirements

• 5+ years shipping production systems software in C/C++ • Experience with an endpoint agent deployed at enterprise scale • Direct experience building or operating an endpoint insider-risk, data-security, or CASB/SASE data-protection product • Strong operating system internals knowledge on at least one platform • Experience with file system filtering, process and handle interception, and the user/kernel boundary • Hands-on content inspection and data classification experience • Knowledge of pattern-based detection, fingerprinting and hashing schemes, file format parsing, archives, and Office/PDF container formats • Experience controlling USB/removable media, print, clipboard, and HTTPS upload egress channels • Multi-threaded, performance-sensitive engineering against measured latency and throughput budgets • Strong debugging and profiling skills on real user machines • Experience investigating application compatibility conflicts involving security agents • Precision-focused approach with instrumentation for false-positive and false-negative rates • Clear written and verbal communication with distributed teams and customer-facing stakeholders • Bonus: OCR, ML-based classification, embeddings or LLM-based content understanding for data protection • Bonus: data lineage or provenance tracking • Bonus: cross-platform development across Windows and macOS; Linux and browser extension development • Bonus: encryption, rights management, or endpoint key handling • Bonus: regulatory compliance and audit-evidence design • Bonus: insider-threat investigation workflows or AI-agent data governance

🏖️ Benefits

• Meaningful equity on top of salary • 90% of medical, dental, and vision coverage paid by Ent • 75% coverage for dependents • Flexible PTO • 12 weeks of fully paid maternity leave (birth, adoption, or foster) • 8 weeks of fully paid paternity leave • $100 monthly lifestyle account for fitness, wellness, learning, and more • $500 home office stipend for remote employees