# Senior Endpoint Engineer, EDR (linux) at Ent

- Company: Ent
- What the company does: Ent is the intent-aware AI endpoint — reading human, AI, and app activity in real time to tell normal work from risky action and act at the moment of risk. Backed by Sequoia and Felicis.
- Company website: https://ent.ai/
- Type: Startups (AI role)
- Level: Senior
- Location: Remote
- Work setup: Remote
- Posted: 2026-09-04
- Apply by: 2026-10-19
- Apply: https://jobs.ashbyhq.com/ent-security/061ecace-89fd-46e7-abc8-3f349a2f9934
- Page: https://www.1752.vc/careers/jobs/ent-senior-endpoint-engineer-edr-linux/

## About the role

We are seeking an Endpoint Engineer to be part of the team that owns the Linux sensor at the core of Ent's EDR capability. This role builds detection and prevention on eBPF, LSM, and the audit subsystem, across the range of Linux customers actually run — workstations, servers, containers, and cloud workloads. You will own the tradeoffs between detection efficacy, false positives, and performance, and defend them with measured data.

## What they're looking for

- 10+ years designing, building, and delivering production C/C++ (or Rust) systems software, a substantial portion of it in endpoint security, OS internals, or comparable performance-critical native code
- Deep working knowledge of operating system internals: process and thread lifecycle, memory management, file systems, drivers or kernel extensions, and IPC
- Hands-on production experience with eBPF
- Demonstrated experience building or operating an EDR, EPP, XDR, or AV product, or equivalent detection-and-response engineering
- Practical fluency in attacker TTPs, you can reason about what an attack looks like in raw telemetry, not just in a written report
- Strong low-level debugging skills, performance tracing, and crash-dump analysis

Tags: R&D