Endpoint Sensor Senior Software Engineer

Endpoint Sensor Senior Software Engineer

About the client

Our client is a leading global cybersecurity company that protects the work people build. As AI agents move at machine speed with human-level access, it disrupts cybercriminal activity before a small slip-up becomes a public one. The culture values thinking fast, going big, delivering and pushing each other to be better, in a community built on respect.

About the role

We are looking for a Senior Software Engineer to join the Endpoint Data Protection team of the client's Insider Risk Management product, which protects organizations from data loss and insider risk across millions of endpoints. This is a foundational role on the endpoint sensor technology that runs continuously and reliably on millions of corporate machines across Windows, macOS and Linux. You will work at the lowest levels of the operating system, building kernel drivers and Endpoint Security extensions, and own features end to end, from early research and proof of concept through production at scale.

This is an AI-first engineering organization. The team is looking for someone genuinely curious about working this way, including how to secure the AI-driven workflows customers are adopting.

What you'll do

• Design and develop core capabilities for the Windows, macOS and Linux agents across the full development and release lifecycle.

• Build performant, reliable kernel-mode components and Endpoint Security / Network extensions that handle complex system interactions.

• Build detection paths and real-time inline enforcement, moving beyond telemetry and alerting to deny/block decisions without hurting endpoint performance.

• Own features end to end and integrate agent capabilities with backend and product workflows.

• Build always-on components with strong observability, performance and stability in production.

• Bring an adversarial, security-first mindset to everything you build, designing components that resist evasion and treat all input as untrusted.

• Work with product and cloud service teams to turn discoveries into capabilities that support real-world security investigations.

Tech environment

C++ • Windows kernel-mode (minifilter, drivers, WFP) • macOS Endpoint Security and Network Extensions • Swift • Linux • Rust • AI-assisted development tools

Why join

• A foundational role on technology that runs on millions of machines.

• Ownership of real-time protection at the core of a global security product.

• Formal and on-the-job learning in cross-functional teams.

Required

• 7+ years building production software, several of them in low-level systems or endpoint development running continuously on large-scale deployments.

• Low-level endpoint development on at least one platform: Windows kernel-mode (minifilter, driver, WFP, C++) or macOS Endpoint Security and Network Extension frameworks (Swift / C++).

• Strong C++ fundamentals: sound judgment on memory, concurrency and performance, and fluency with debugging and profiling tools.

• Experience designing extensible software architectures: library boundaries, interface contracts and the discipline to evolve long-lived code.

• A two-way security mindset: reasoning about evasion and adversarial behavior, and about how authorized users move data.

• Experience building real-time inline enforcement (deny/block paths) under the performance and stability constraints of always-on endpoint software.

• Performance discipline: profiling, caching and memory management so the software never degrades the user's experience.

• Daily use of AI coding assistants and agents, and interest in securing AI-driven workflows.

• Clear technical communication in English.

Nice to have

• Cross-platform development across Windows, macOS and Linux.

• Network-layer monitoring: user-space traffic capture, TLS-aware analysis, macOS Network Extensions or Windows Filtering Platform.

• Data security, DLP or content-classification concepts.

• Shipping enterprise endpoint software: silent install, auto-update, multi-tenant configuration and heterogeneous corporate fleets.

• Rust in production, or the ability and interest to work in a Rust codebase.

• Behavioral analytics or adjacent detection domains.

• Permanent contract (contrato a término indefinido) with all legal benefits

• Competitive salary

• Private health insurance (medicina prepagada)

• Formal and on-the-job learning in cross-functional teams

• On-site role in Medellín with parking