ent-security - Senior Endpoint Engineer, EDR (linux)

• 10+ years designing, building, and delivering production C/C++ (or Rust) systems software, a substantial portion of it in endpoint security, OS internals, or comparable performance-critical native code. • Deep working knowledge of operating system internals: process and thread lifecycle, memory management, file systems, drivers or kernel extensions, and IPC. • Hands-on production experience with eBPF. • Demonstrated experience building or operating an EDR, EPP, XDR, or AV product, or equivalent detection-and-response engineering. • Practical fluency in attacker TTPs; you can reason about what an attack looks like in raw telemetry, not just in a written report. • Strong low-level debugging skills, performance tracing, and crash-dump analysis. • Multi-threaded and concurrent programming under load — synchronization, lock contention, race conditions, and object lifetime management. • A track record of code running on large fleets without degrading end-user experience; you treat stability and performance as product features. • Scripting fluency for tooling and test automation (Python or equivalent). • Clear written and verbal communication with distributed teams and, when escalations demand it, directly with customers. • Kernel-mode driver or kernel extension development shipped to production at scale. • Reverse engineering, malware analysis, or exploit and vulnerability research background. • Experience with anti-tamper and code integrity.