{"id":698893,"url":"https://alion.io/job/ent-endpoint-engineer","title":"Senior Endpoint Engineer","company":{"id":673402,"name":"Ent","domain":"ent.ai","url":"https://alion.io/company/ent-4","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Support","role_family":"Support","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US","CA","MX","AI","AG","AW","BS","BB","BZ","BM","VG","BQ","KY","CR","CW","DM","DO","SV","GL","GD","GP","GT","HT","HN","JM","MQ","MS","NI","PA","PR","KN","LC","VC","PM","SX","TT","TC","VI"],"hiring_countries_total":38,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":151000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":104},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Bazel","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"CMake","optional":false},{"name":"Configuration Management","optional":false},{"name":"Copilot","optional":false},{"name":"DLP","optional":false},{"name":"eBPF","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-04T06:45:35Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-27T20:28:26Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Senior Endpoint Engineer\nAbout Ent\nEnt is the intent-aware workspace security platform for securing human and AI-driven work. Built to protect productivity, the new attack surface, Ent understands not just what users and agents do but why, and intervenes at the moment of risk before incidents occur. Where existing tools see events, Ent sees intent, so security teams can step in at the moment of risk instead of investigating days later. Founded by Lou Manousos and Brandon Dixon, co-founders of RiskIQ (acquired by Microsoft) and the team behind Microsoft Security Copilot, Ent is in production with Global 2000 customers across hospitality, financial services, and defense, and backed by Decibel, Sequoia, Crosspoint Capital, Craft Ventures, Shield Capital, Felicis, and In-Q-Tel. We’re now hiring the team that will define this category.\nHow We Work\nCustomer first. The product and the business are built around problems we’ve watched real security teams struggle with - not the other way around. Every roadmap conversation starts with what a CISO told us last week.\nHumble. No drama. We hire people who share the mission and trust each other to deliver. Teamwork over showmanship. Accountability over politics. The work speaks louder than the person doing it.\nUrgency. The window to build a durable security company in the AI era is open right now and it will not stay open. The shot clock has started. We move at the speed of the people we want to protect.\nAbout the Role\nWe are seeking an Endpoint Engineer to be part of the team that owns the endpoint agent every Ent capability ships on: collection, policy evaluation, enforcement, transport, and the lifecycle machinery around them. This role is measured on the things customers only notice when they break - installs, updates, offline behavior, and resource footprint on machines you cannot log into. Every other endpoint capability depends on getting it right.\nWhat You’ll Achieve\nBuild and own components of Ent's single lightweight agent across Windows, macOS, or Linux; collection, enrichment, policy evaluation, enforcement, IPC, local storage, and cloud transport.\n\nDeliver features end to end: design, implementation, tests, telemetry, staged rollout, and post-release monitoring.\n\nOwn agent lifecycle engineering: packaging and installers (MSI, PKG, DEB/RPM), enrollment, configuration delivery, safe staged self-update, rollback, and clean uninstall.\n\nKeep the agent fast and boring - enforce CPU, memory, disk, and network budgets, catch performance regressions in CI, and treat stability as non-negotiable on machines you cannot log into.\n\nImplement offline and degraded-mode behavior: local queueing, backpressure, policy caching, retry semantics, and clock and connectivity edge cases.\n\nApply secure engineering fundamentals inside a privileged process: least privilege, signed and verified updates, secrets handling, and safe parsing of untrusted input.\n\nBuild diagnostics, log collection, health reporting, and support tooling so field issues can be root-caused without attaching a debugger to a customer's laptop.\n\nOwn test infrastructure for the agent: unit and integration tests, cross-platform CI, OS-version matrices, upgrade and downgrade paths, and soak and performance testing on real hardware.\n\nIntegrate agent signals with backend services and the browser extension, and work with platform teams on API and schema evolution without breaking older agent versions.\n\nHandle escalations across the stack - failed installs, conflicts with other security agents, OS and kernel upgrades, crashes, and performance complaints.\n\nContribute to code review, design review, documentation, and the on-call rotation for agent health.\n\nWhat You’ll Bring\nMust-haves\n5+ years building production software in C/C++ or Swift, including work on native desktop or endpoint software.\n\nWorking knowledge of operating system internals and system APIs on at least one of Windows, macOS, or Linux.\n\nExperience with software that runs unattended on machines you do not control: versioning, upgrades, backward compatibility, and failure recovery.\n\nSolid grasp of concurrency, memory management, and empirical performance measurement.\n\nDebugging discipline - you reproduce, instrument, and prove root cause instead of guessing at fixes.\n\nComfort with build systems, cross-platform CI/CD, and test automation (CMake or Bazel, GitHub Actions or equivalent), plus scripting in Python.\n\nSecurity-conscious coding habits: input validation, privilege boundaries, and awareness of how endpoint software itself becomes attack surface.\n\nClear communication and effective collaboration in a distributed, fast-moving team.\n\nBonus\nPrior endpoint security experience - EDR, DLP, EPP, MDM, or insider risk - or work on systems-monitoring agents.\n\nExposure to kernel extensions and drivers, eBPF, ETW, or the macOS Endpoint Security Framework.\n\nEnterprise deployment realities: Intune, Jamf, SCCM, Ansible, and MDM-driven configuration management.\n\nCode signing, Apple notarization, or driver attestation pipelines.\n\nOur Benefits\nDistributed workplace. While we have positions we hire for in our SF office, we also hire remotely across North America.\n\nOwn a piece of the journey. Every teammate gets meaningful equity on top of their salary.\n\nWe’ve got you covered. 90% of your medical, dental, and vision is paid by Ent. We also cover 75% for your dependents.\n\nTake the time you need. Our flexible PTO lets you recharge, travel, or just take a breather.\n\nFamily matters. 12 weeks of fully paid maternity leave (birth, adoption, or foster) and 8 weeks fully paid paternity leave.\n\nLive well. A $100 monthly lifestyle account to spend on what keeps you healthy and happy - fitness, wellness, learning, and more.\n\nSet up your space. A $500 home office stipend when you join as a remote employee.\n\nDiversity & Accommodations\nWe’re committed to building a diverse, inclusive, and equitable workplace where people of all backgrounds, identities, experiences, and abilities are welcomed, valued, and supported. We recognize there is no single path to success and value nontraditional career journeys and diverse perspectives as key to building stronger, more innovative teams.\nWe strive to ensure an inclusive experience at every stage of hiring and are happy to provide reasonable accommodations. If you require accommodations or accessible formats at any point during our process, please let your recruiter know. As an equal opportunity employer, our hiring process is designed to put you at ease and help you do your best work. If there’s anything we can do to improve your experience, we’re always open to feedback.","description_format":"text","description_chars":6655,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Greenland","iso":"GL","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-11T02:27:22Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.651,"p_room":0.35,"age_days":52,"expected_fill_days":22,"reasons":["conf:3","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/ent-endpoint-engineer","json_url":"https://alion.io/job/ent-endpoint-engineer.json","meta":{"generated_at":"2026-10-27T22:07:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13644,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673402},"rest":"https://alion.io/mcp/rest/get_company?id=673402"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fent-endpoint-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fent-endpoint-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fent-endpoint-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ent-endpoint-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fent-endpoint-engineer"}]}