Endpoint Engineer, EDR – Windows

Job not on LinkedIn

🔥 0 minutes ago

🏈 North America – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ENT

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2001

💼 Consulting

🤝 Non-profit

🔬 Science

Consulting • Non-profit • Science

ENT is a socio‑economic initiative made up of two organizations (a consultancy and a foundation) that deliver multidisciplinary professional services focused on environmental policy, research and innovation. For more than 20 years they have worked on the design, analysis and management of environmental policies and instruments — especially waste management, environmental taxation, producer responsibility and deposit-return systems — as well as climate change, marine environment and ecology. ENT participates in R+D+i projects, publishes research, offers training and advisory services, and holds ISO 9001 and 14001 certifications.

📋 Description

• Design, build, and ship kernel- and user-mode components of the Ent agent for Windows • Observe process, file, registry, network, and identity activity and convert it into high-fidelity intent signals • Own EDR-class detection and prevention end to end, including sensor instrumentation, event enrichment, on-box correlation, and interception logic • Instrument telemetry at the OS boundary using ETW, kernel callbacks, and minifilters • Harden the agent against tamper, bypass, and evasion through self-protection and integrity validation • Keep sensor CPU, memory, and I/O within strict budgets while processing thousands of events per second • Profile hot paths and eliminate performance regressions before release • Build test harnesses and automated regression coverage • Drive high-severity customer escalations to root cause, including crashes, hangs, performance regressions, and missed detections • Convert escalation patterns into permanent fixes • Partner with security research, AI, platform, and product teams on policy enforcement, interventions, and investigation timelines • Review code, mentor engineers, document design decisions, and share ownership of agent release quality and on-call

🎯 Requirements

• 10+ years designing, building, and delivering production C/C++ systems software, with a substantial portion in endpoint security, OS internals, or comparable performance-critical native code • Deep working knowledge of operating system internals, including process and thread lifecycle, memory management, file systems, drivers or kernel extensions, and IPC • Hands-on production experience with kernel callbacks and minifilters • Experience building or operating an EDR, EPP, XDR, or AV product, or equivalent detection-and-response engineering • Practical fluency in attacker TTPs and raw telemetry analysis • Strong low-level debugging, performance tracing, and crash-dump analysis skills • Experience with multithreaded and concurrent programming under load, including synchronization, lock contention, race conditions, and object lifetime management • Track record of code running on large fleets without degrading end-user experience • Scripting fluency for tooling and test automation, using Python or equivalent • Clear written and verbal communication with distributed teams and customers • Kernel-mode driver or kernel extension development shipped to production at scale • Reverse engineering, malware analysis, or exploit and vulnerability research background • Experience with anti-tamper, code integrity, driver signing, and WHQL attestation

🏖️ Benefits

• Every teammate gets meaningful equity on top of their salary • 90% of medical, dental, and vision is paid by Ent • 75% coverage for dependents • Flexible PTO • 12 weeks of fully paid maternity leave (birth, adoption, or foster) • 8 weeks of fully paid paternity leave • $100 monthly lifestyle account for fitness, wellness, learning, and more • $500 home office stipend when joining as a remote employee • Distributed workplace and remote work across North America