{"id":1310123,"url":"https://alion.io/job/reach-security-principal-support-engineer-endpoint","title":"Principal Support Engineer - Endpoint","company":{"id":2255436,"name":"Reach Security","domain":"reach.security","url":"https://alion.io/company/reach-security","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Support","role_family":"Support","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"DLP","optional":false},{"name":"Linux","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"eBPF","optional":true},{"name":"GCP","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"SentinelOne","optional":true}],"status":"live","first_seen_at":"2026-08-25T18:20:40Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-01T09:19:50Z","board_verified":true,"closed_at":null,"days_open":37,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":37},"description":"Principal Support Engineer - Endpoint\nDOMAIN SUBJECT-MATTER EXPERT · ESCALATION & ENABLEMENT\nAbout the role\nReach Security tells organizations what their existing security tools should be doing with the products they already own - and proves it. As a Principal Support Engineer, Endpoint, you are Reach's senior domain authority on everything endpoint.\nThis is not an endpoint break/fix role. You won't spend your days administering endpoints, packaging agents, or chasing agent crashes. You've already done that work - for years - and that is exactly what qualifies you. Those years in the trenches are what let you look at a customer's endpoint configuration, their controls, and Reach's findings and say, with authority, what matters, what doesn't, and why.\nIn this role you put that hard-won judgment to work advising the field, guiding customers through their hardest problems, sharpening Reach's recommendations, and troubleshooting how Reach integrates with the endpoint products already in a customer's environment. It is a high-agency individual-contributor role for a proven expert who is energized by unfamiliar problems rather than thrown by them.\nWhat this role really does\nYou'll serve three audiences at once, and the strongest people in this seat move fluidly between them:\nEnable the field (Sales Engineering & POVs). Help SEs build the strongest possible POV from Reach's endpoint findings - translating raw product output into “here's the risk, here's why it's urgent, here's what to fix first.” Coach the technical field team to defend those findings under technical scrutiny and tell Engineering and Research what would make the next POV even more compelling.\n\nEmpower Customer Success. Be the deep technical resolver behind CS. When a customer hits a genuinely hard endpoint-related problem, you investigate to root cause, propose the solution, and hand Engineering a clean, reproducible diagnosis - so engineers validate and ship rather than doing front-line discovery.\n\nHarden the product. Own your share of the escalation queue and close the loop: solve, reproduce, test, document, and enable - so each issue makes Reach more robust and each runbook makes the whole team faster.\n\nHow you'll spend your time\nServe as the endpoint subject-matter expert for the support team - review customer endpoint configurations, controls, and policies and make sage, prioritized recommendations grounded in real-world best practice.\n\nCritique Reach's endpoint findings, so customers are presented only with what truly matters - separating signal from noise and articulating why a finding is urgent, or why it isn't.\n\nTroubleshoot integrations between Reach and third-party endpoint and security products (EDR, DLP, MDM, and similar) - using your deep knowledge of how those products actually behave to pinpoint where an integration breaks and propose the fix. This is where your hands-on background is exercised most directly.\n\nDiagnose deep, engineering-level customer issues end to end - using logs, telemetry, diagnostics, and OS-level reasoning to reach true root cause, then packaging a clear diagnosis and proposed fix that Engineering can act on quickly.\n\nUplevel the Sales Engineering team - teach the field to read and explain endpoint findings, defend recommendations to customer security teams, and translate product output into what matters to the customer.\n\nPartner with Engineering and QA to report defects, validate fixes, confirm workarounds, and drive root-cause analysis.\n\nAuthor and maintain runbooks, troubleshooting guides, and internal documentation that turn your field experience into repeatable team knowledge.\n\nMaintain enough of a lab or test capability to validate hypotheses about endpoint behavior and integration edge cases.\n\nThe experience that qualifies you\nThe experience below is the foundation we're hiring for. You've done this work hands-on, at depth, earlier in your career - and in this role you'll leverage that judgment as a subject-matter expert rather than performing it day to day. We're screening for the expertise that experience produced, not for a desire to keep doing endpoint administration.\n6+ years of deep, hands-on experience with Windows and macOS endpoint agents and endpoint security in enterprise environments - enough to have developed genuine expertise, not passing familiarity.\n\nTime in a senior individual-contributor role such as L3 Support Engineer, Endpoint Engineer, Windows/macOS Engineer, or Security Support Engineer.\n\nDemonstrated command of endpoint agent behavior across Windows and macOS - installation, upgrades, persistence, OS compatibility, performance, and stability - and the judgment to know what “good” looks like.\n\nKernel-level understanding of Windows, including ETW, WFP, memory management, process/thread behavior, and driver interactions.\n\nmacOS internals experience, including the Endpoint Security framework, System Extensions, FSEvents, MDM interactions, notarization, code signing, and process lifecycle.\n\nA track record of analyzing endpoint telemetry, logs, and diagnostics to reach root cause in complex system interactions.\n\nExperience resolving interoperability issues between endpoint agents and security tools (EDR, DLP, MDM, or similar).\n\nWorking knowledge of Linux system administration, sufficient to reason about supporting services that interact with endpoint deployments.\n\nExperience with enterprise-scale environments and large endpoint fleets.\n\nThe advisory instinct that defines this role: the ability to look at a set of findings and controls and tell a customer, clearly, which few things matter and why.\n\nStrong written and verbal communication - you can make a complex endpoint issue clear to a customer, an SE, and an engineer, each in their own language.\n\nStrong time management and a real sense of urgency in customer-impacting situations.\n\nBS or MS in Computer Science, Engineering, or a related technical discipline - or equivalent practical experience.\n\nCross-domain fluency we value\nReach spans the whole security stack, and the best domain experts are curious well past their specialty. You don't need to be an expert in all of these, but comfort in several will make you far stronger here: identity and IDP troubleshooting (SSO, SAML/OIDC, layered and conditional access, MDM-to-IdP interactions); a working grasp of threats and vulnerabilities and how they manifest at the endpoint; and familiarity with email security controls. We'll gladly help you deepen the areas you're newer to.\nNice to have\nExperience supporting endpoint security, insider risk, or behavioral-analytics platforms.\n\nExperience reproducing customer issues in labs that mirror production endpoint configurations.\n\nExposure to cloud or hybrid enterprise environments (AWS, Azure, GCP).\n\nLinux internals: kernel/user-space boundaries, eBPF, LSM (SELinux/AppArmor), cgroups and namespaces, netfilter, systemd, proc/sysfs, inotify/fanotify, auditd/seccomp, ELF/ptrace.\n\nHands-on experience with third-party endpoint security products such as CrowdStrike Falcon, Microsoft Defender, SentinelOne, or similar.\n\nWho you'll thrive as\nYou're the person peers escalate to - and still the first to say “I haven't seen that before, let me dig in.” You think in systems, you're relentless about root cause, and you're generous with what you learn. You're as comfortable teaching the field how to defend a finding as you are reading a kernel trace. Curiosity, adaptability, and low ego matter to us as much as depth: the security stack keeps changing, and we're looking for someone who's genuinely excited by that.\nWorking at Reach Security:\nCompetitive salary, and equity package\n\nComprehensive benefits package including:\n\nMedical, dental, and vision insurance, including plan options with company-paid employee coverage\n\nFSA, HSA, and 401(k) plans\n\nCompany paid life insurance and disability coverage, along with buy up options\n\nVoluntary benefits including pet insurance, identify theft coverage, and legal services\n\nUnlimited PTO and sick time","description_format":"text","description_chars":8036,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Unlimited PTO","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Information Technology"],"lifecycle":[{"event":"open","at":"2026-09-26T15:33:06Z"}],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.397,"p_room":0.35,"age_days":36,"expected_fill_days":14,"reasons":["conf:29","win:tail"],"computed_at":"2026-10-01T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/reach-security-principal-support-engineer-endpoint","json_url":"https://alion.io/job/reach-security-principal-support-engineer-endpoint.json","meta":{"generated_at":"2026-10-01T21:05:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3616,"day_limit":5000,"remaining_today":1384,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}