Senior Windows Endpoint Developer — Workforce AI Security (NXJ-197)

The product is an enterprise platform providing visibility and governance over employee interactions with generative AI tools and developer environments at global scale. It operates on managed Windows endpoints, monitoring AI usage, enforcing DLP policies, and inspecting network traffic while coexisting with existing antivirus, EDR, VPN, proxy, and device-management software.

• 8+ years of systems-level development experience, including strong production experience building Windows software or endpoint products (5+ years considered with strong security background)
• Deep practical expertise in Windows internals and architecture at the system level
• Professional-level proficiency in C# as primary development language and strong C++ systems experience
• Proven production experience developing Windows software, endpoint agents, or security products
• Deep knowledge of Windows security architecture including privileged services, registry, COM, WMI, UAC, elevation, and certificate management
• Proven track record of owning endpoint features end-to-end from architecture to production delivery
• Ability to work independently and debug complex field issues without constant guidance
• Strong communication and collaboration skills in remote and cross-functional environments
• CS degree or equivalent practical engineering background

Nice to have:

• Expertise with Windows installer technologies such as MSI, InstallShield, or WiX including custom actions, silent installation, upgrades, and rollback
• Hands-on experience with enterprise deployment tooling like Intune, Configuration Manager/SCCM, Group Policy, or Tanium
• Experience troubleshooting antivirus and EDR coexistence, understanding endpoint behaviors that trigger security products
• Strong knowledge of Windows certificate stores, code signing, EV signing, and SmartScreen reputation
• Production experience with TLS interception, trust-chain management, certificate pinning, and related edge cases
• Experience with Windows Filtering Platform, network drivers, or kernel-mode components
• Experience with Python or Rust
• Hands-on experience with AI developer tools such as Claude Desktop, Cursor, VS Code extensions, or Model Context Protocol (MCP)
• Browser extension development for Edge or Chrome
• Experience with network traffic inspection or packet analysis
• Previous experience at a cybersecurity vendor with DLP, CASB, EDR, or browser security products
• macOS or cross-platform endpoint development experience

• Own the Windows agent end-to-end, leading architecture for privileged services, inter-process communication, installation, and unattended auto-update pipelines
• Architect certificate trust and TLS interception on Windows, handling machine and user certificate stores, trust chains, and resistant applications
• Design resilient state-reconciliation logic for system proxy configuration, ensuring coexistence with VPN clients, cloud proxies, and competing software
• Build deep integrations into AI developer tools such as Claude Desktop, Cursor, and VS Code to inspect and govern local AI activity
• Ensure reliable coexistence with antivirus, EDR, VPN, proxy, and other endpoint security products, addressing compatibility issues internally
• Drive field root-cause engineering to transform recurring deployment and runtime failures into permanent product fixes
• Own the Windows installation and update experience, including silent installation, upgrades, rollback scenarios, and enterprise deployment edge cases
• Act as the definitive Windows technical owner, establishing engineering standards and contributing to the agent's technical direction
• Ensure the product follows a fail-open philosophy, with error paths degrading gracefully without interrupting connectivity or resource access

Remote work available in Europe.