Product Manager owning Spotify’s data catalogue, metadata, and lineage roadmap. Improving how engineers, analysts, and AI agents discover and safely use data.
About the role
- Endpoint Engineer building Ent’s endpoint data-protection layer for enterprise workspace security. Classifying sensitive data, controlling exfiltration channels, and integrating on-device intent intelligence.
Responsibilities
- Build Ent's endpoint data-protection layer to classify sensitive data, trace its movement, and enforce policy at egress
- Instrument and control exfiltration channels including USB, printing, clipboard, drag-and-drop, screen capture, network shares, Bluetooth/AirDrop, email, browser uploads, sync clients, and AI tools or agents
- Implement on-device content inspection and classification using patterns, keywords, dictionaries, document matching, fingerprinting, file and structure identification, and OCR
- Integrate Ent's on-device small language model into classification and intent decisions
- Build data lineage and provenance tracking across copying, renaming, transformation, archiving, compression, and re-encoding
- Implement interception plumbing using Windows minifilters and ETW, macOS Endpoint Security Framework and Network Extensions, Linux fanotify and eBPF, and browser extension hooks
- Build labeled corpora, measure detector false-positive and false-negative rates, and tune classification quality
- Budget CPU, memory, and I/O for content scanning without blocking, delaying, or corrupting legitimate workflows
- Produce forensic incident evidence covering who, what data, channel, and intent
- Own customer escalations involving missed egress paths and application-compatibility conflicts, converting recurring patterns into permanent fixes
- Partner with product, security research, AI, and compliance stakeholders to map endpoint controls to GDPR, HIPAA, PCI DSS, CCPA, and export-control requirements
Requirements
- 5+ years shipping production systems software in C/C++
- Experience with an endpoint agent deployed at enterprise scale
- Direct experience building or operating an endpoint insider-risk, data-security, or CASB/SASE data-protection product
- Strong operating system internals knowledge on at least one platform
- Experience with file system filtering, process and handle interception, and the user/kernel boundary
- Hands-on content inspection and data classification experience
- Knowledge of pattern-based detection, fingerprinting and hashing schemes, file format parsing, archives, and Office/PDF container formats
- Experience controlling USB/removable media, print, clipboard, and HTTPS upload egress channels
- Multi-threaded, performance-sensitive engineering against measured latency and throughput budgets
- Strong debugging and profiling skills on real user machines
- Experience investigating application compatibility conflicts involving security agents
- Precision-focused approach with instrumentation for false-positive and false-negative rates
- Clear written and verbal communication with distributed teams and customer-facing stakeholders
- Bonus: OCR, ML-based classification, embeddings or LLM-based content understanding for data protection
- Bonus: data lineage or provenance tracking
- Bonus: cross-platform development across Windows and macOS; Linux and browser extension development
- Bonus: encryption, rights management, or endpoint key handling
- Bonus: regulatory compliance and audit-evidence design
- Bonus: insider-threat investigation workflows or AI-agent data governance
Benefits
- Meaningful equity on top of salary
- 90% of medical, dental, and vision coverage paid by Ent
- 75% coverage for dependents
- Flexible PTO
- 12 weeks of fully paid maternity leave (birth, adoption, or foster)
- 8 weeks of fully paid paternity leave
- $100 monthly lifestyle account for fitness, wellness, learning, and more
- $500 home office stipend for remote employees
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Data Engineer building scalable data platforms for Alpaca’s global brokerage infrastructure. Operating Kubernetes, streaming, lakehouse, and cloud data systems at scale.
Senior Data Platform Engineer building scalable data platforms for Mistplay, a mobile gaming loyalty app. Owning ingestion, lakehouse, pipelines, observability, and low - latency data access.
Azure data platform administrator operating Desjardins’ cloud data platform. Supporting DevOps teams through infrastructure automation, security, deployments and production operations.
Data Engineering Analyst optimizing Servus Credit Union’s data warehouse, pipelines, integrations, and analytics infrastructure. Supporting data - driven financial services for Alberta members.
Azure Data Platform Administrator supporting Desjardins’ hybrid DevOps infrastructure. Automating tasks, stabilizing environments, and advising on IT solutions and change management.
Senior Data Engineer building secure, scalable data platforms for Assent’s product compliance intelligence network. Driving architecture, hands - on implementation, governance, and technical mentorship.
Staff Data Engineer building scalable data platforms for Penn Entertainment’s gaming, sports betting, and media products. Leading architecture, data quality, analytics engineering, and technical mentorship.
Senior Data Engineer designing scalable Databricks Lakehouse architectures for Bits In Glass, an AI and automation consulting firm. Building governed pipelines, streaming solutions, and cloud data platforms for client modernization.
Senior Data Engineer designing scalable Databricks lakehouse architectures for Bits In Glass, an AI and automation consulting firm. Leading pipelines, governance, cloud modernization, and client data solutions.