
Endpoint Engineer, Data Security at Ent
Intent-aware AI security platform preventing enterprise incidents in real time.
Team of 110
Build the endpoint data-protection layer of a security agent: on-device classification of sensitive data, tracing data movement and lineage, and enforcing policy at egress including AI tools/agents; covers exfiltration channels such as USB, printing, clipboard, drag-and-drop, screen capture, network shares, Bluetooth/AirDrop, email, browser/web uploads, sync clients, IDE assistants, and CLI agents; combines classic content inspection with an on-device small language model for intent-aware enforcement; work includes interception plumbing across OS internals and browser hooks, precision measurement via labeled corpora and false-positive/false-negative tuning, performance budgeting on user machines, forensic incident evidence generation, customer escalations, and mapping controls to GDPR, HIPAA, PCI DSS, CCPA, and export controls; must: 5+ years shipping production C/C++ systems software, enterprise-scale endpoint agent experience, prior insider-risk/data-security/CASB/SASE endpoint experience, OS internals on at least one platform, hands-on content inspection/classification, egress-channel controls, multithreaded performance-sensitive engineering, debugging/profiling on real user machines; bonus: OCR, ML/LLM-based classification, data lineage/provenance tracking, cross-platform Windows/macOS/Linux, browser extensions, endpoint encryption/rights management/key handling, compliance/audit-evidence design, insider-threat workflows, AI-tool data governance
Remote across North America