Linux Endpoint Engineer

Job Summary

Seeking a full-time remote Linux Endpoint Engineer, this role will design, build, and manage EDR capabilities for Linux systems, focusing on detection and prevention using eBPF and other core technologies.

Key responsibilities

• Design and implement kernel- and user-mode components for the Ent agent to monitor and analyze Linux activity
• Own the end-to-end EDR detection and prevention capabilities, ensuring high efficacy and low false positives
• Collaborate with cross-functional teams to integrate sensor signals into policy enforcement and incident response

Required qualifications

• 10+ years of experience in C/C++ (or Rust) systems software, particularly in endpoint security or OS internals
• Deep understanding of operating system internals, including process management and memory management
• Hands-on experience with eBPF and building or operating EDR, EPP, XDR, or AV products
• Strong skills in low-level debugging, performance tracing, and crash-dump analysis
• Proficiency in scripting for tooling and test automation (Python or equivalent)