Enpoint Sensor Software Engineer I About the client Our client is a leading general cybersecurity company that protects the work people build. As AI agents move at machine speed with human-level access, it disrupts cybercriminal activity before a small slip-up becomes a public one. The culture values thinking fast, going big, delivering and pushing each other to be better, in a community built on respect.

About the role
We are looking for a Software Engineer to join the Endpoint Data Protection team of the client's Insider Risk Management product, which protects organizations from data loss and insider risk across millions of endpoints. This is a foundational role on the endpoint sensor technology that runs continuously and reliably on millions of corporate machines across Windows, macOS and Linux. You will work at the lowest levels of the operating system, building kernel drivers and Endpoint Security extensions that power how the product detects and stops data loss. You will build features end to end, from early research and proof of concept through production at scale. This is an AI-first engineering organization. The team is looking for someone genuinely curious about working this way, including how to secure the AI-driven workflows this role increasingly has to defend against.

What you'll do
• Implement features and fixes in the Windows, macOS and Linux agents, starting with well-scoped pieces and growing toward owning small features end to end.
• Work at the OS boundary: kernel-mode components and Endpoint Security / Network extensions,



with increasing independence as you build platform depth.
• Contribute to detection paths and inline enforcement logic, moving from guided implementation toward owning specific paths.
• Integrate agent capabilities with backend and product workflows, first on existing integration points and later designing new ones.
• Build observability, performance and stability into always-on production components, mentored by senior engineers.
• Develop a security-first mindset: reason about untrusted input, evasion and insider risk, not just external attackers.
• Explain and defend the code you ship in review, including AI-assisted code: why it's correct, not just that it passed. Tech environment C++
• Windows kernel drivers / WFP
• macOS Endpoint Security and Network Extensions
• Linux / eBPF
• Rust
• Swift
• AI-assisted development tools Why join
• A foundational role on technology that runs on millions of machines.
• Deep systems and security work, mentored by senior engineers.
• Formal and on-the-job learning in cross-functional teams. Requirements Required
• 1–4 years building production software. Coursework,



internships and personal projects in low-level systems count toward the lower end of the range.
• C++ fundamentals: memory management, concurrency and performance trade-offs, with debugging and profiling skills that grow with experience.
• Interest in systems programming on Linux, macOS or Windows, such as kernel-mode drivers / WFP, Endpoint Security or Network Extensions, or eBPF, and a clear path toward deeper platform expertise.
• Ability to read and understand existing software architecture, and to make small, sound architectural decisions on your own.
• A security-curious mindset and growing ability to reason about adversarial behavior and insider risk.
• Comfort using AI coding assistants, with the discipline to verify and understand what they produce.
• Coachability and a track record of turning feedback into better design and code.
• Able to explain technical ideas clearly in English. Nice to have
• Rust, Swift or systems-level Linux development experience.
• Cross-platform development across Windows, macOS and Linux.
• Network-layer monitoring or data security / DLP concepts.
• Experience shipping enterprise software (installation, auto-update, multi-tenant configuration).
• A portfolio (GitHub, blog or coursework) showing hands-on systems work. Benefits
• Permanent contract (contrato a término indefinido) with all legal benefits
• Competitive salary
• Private health insurance (medicina prepagada)
• Formal and on-the-job learning in cross-functional teams
• On-site role in Medellín with parking

📌 Endpoint Sensor Software Engineer I (Medellín)
🏢 Roca Alliances
📍 Medellín