דרושים » הנדסה » Senior Low Level Engineer

The same systems work as our senior role, aimed at someone earlier in their career who gets real work done in a hard codebase with agentic tools. Systems programming has a reputation for being locked behind ten years of experience. We don't fully buy that. Someone with solid fundamentals, real curiosity about how machines work, and deep control of agentic coding tools can contribute here much sooner - as long as they have the judgment to check what the tools hand back. That judgment matters more here than almost anywhere: the agent runs as root and SYSTEM, and the codebase forbids unwrap, panic, and unchecked indexing, so you can't ship code you don't actually understand.

What you'll work on

Real pieces of the sensor across macOS and Windows: inventory, telemetry, the policy enforcement path, installers, and the integrations that hook into AI coding tools and browser extensions.

Moving through unfamiliar OS APIs quickly with agentic tools, then checking the result against the docs, the tests, and a real machine.

Small tools and tests that make the codebase easier for everyone to work in.

Tech you'll work with

The work is low-level systems development in Rust, close to the operating system across Windows, macOS, and Linux - memory, processes, files, and the OS internals that expose them. Alongside that, you'll lean hard on agentic coding tools; deep fluency with at least one is central to how we work, not a bonus. Expect to range across the stack - OS internals, AI tooling internals, CI, and a fair amount of reverse engineering - and to learn the parts you don't know yet.

We are on a mission to secure the AI transformation that every company is going through, building a platform that protects organizations as they adopt AI tools at scale. This is your chance to join one of the fastest-growing areas in our company and develop technology that will define how cybersecurity operates in the AI era. You will be part of a multidisciplinary team of backend engineers, endpoint developers, AI researchers, and product experts from Israel and global acquisitions, all working together to deliver cutting-edge, end-to-end security solutions to the worlds largest enterprises.
As a Software Developer on our team, you will work across both backend services and endpoint components, designing scalable systems that connect endpoint-level data collection with cloud-based analysis and enforcement. Youll play a key role in building the agents and services that monitor and control interactions with AI tools, shaping a new category of security products that operate seamlessly across platforms and environments.
Key Responsibilities
Develop and maintain backend services alongside endpoint components for a cross-platform security platform
Design scalable systems that integrate endpoint-collected data with cloud-based processing and enforcement
Build and enhance endpoint agents responsible for monitoring and controlling interactions with AI tools (e.g., coding assistants, web-based AI services)
Implement data pipelines, policy enforcement logic, and secure data handling mechanisms across endpoint and backend layers
Collaborate with AI and product teams to deliver end-to-end solutions
Troubleshoot and resolve complex issues across distributed system and endpoint components.

We are looking for an experienced QA engineer to lead and drive the Quality of our cloud sensor - the industrys most efficient security tool for monitoring application-layer attacks in real time.

we are a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, were on a mission to make real-time security a reality.

As our Sensor Quality Lead, youll own the quality of the Sensor - how we test it, and how we prove it works accurately and efficiently across the environments our customers run it in. There's no existing playbook for this role; you'll be the one writing it, tackling complex testing challenges in the Linux systems realm and building the automation that lets us ship with confidence.

In particular:

Design and build automated test frameworks and specialized harnesses for the Sensor
Build and maintain test environments across Kubernetes, Docker, and VMs, including test applications written in different languages, so a single build is validated everywhere it runs
Build the test infrastructure that measures accuracy, performance, and resource consumption under high scale
Define quality metrics for the Sensor, build the test infrastructure that measures them along with dashboards and visibility measures to surface them
Collaborate with the Sensor teams, Product Managers, research, and other R&D teams to deliver end-to-end quality

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Windows Detection Engineering Manager you will be tasked with helping shape the future of endpoint security through a unified, converged platform that automatically prevents, detects, and responds to threats in real time. You will lead a team of engineers that create advanced Windows behavioral detections and in memory traps by combining deep understanding of the OS system, behavioral analysis, and innovative machine learning techniques to identify and stop sophisticated attacks before they cause harm.
You will join a growing team of passionate security experts and technical leaders who think differently, challenge assumptions, and constantly explore new ways to outsmart adversaries. In this role, you will lead a strategic team to advance windows detection forward through both research and engineering.
What Will You Do?
Primary responsibilities include:
You will manage a team of detection engineers and guide them through the research and development of detection rules and infrastructure.
You will be responsible for driving the detection of the newest malware and exploits based on our companys Endpoint Protection platform. Your role wont end with a hypothesis or a document - youll have an end-to-end responsibility for behavior-based detection capabilities, starting from leading any prior research, designing new methods to detect or prevent those, and the implementation of it in the product in the end (SW development in C++23 and scripting in Lua).
You will be leading the development and research of attack tools, PoCs, and the discovery of new ways to detect/prevent exploitation attacks (EoP, drive-by attacks, and more).
At the end of the day, your deliveries will enhance the security of dozens of millions of Windows endpoints, which are protected by our platform.
You will meet extraordinary challenges facing the newest attacks and tech obstacles, and overcome them. You will work with the very BEST in the industry in a flexible and independent environment. You will influence the design of a disruptive product that will shape the security industry of tomorrow.

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Staff Software Engineer - C++ Endpoint Security, Collection Engineering (Data Protection Team), you will be tasked with designing and implementing low-level C++ or Rust agent modules as a foundational member of our newly formed Data Protection unit. You will research and develop high-fidelity sensors and robust, scalable code to monitor and prevent sensitive data leakage across multiple operating systems. By building these mission-critical collection engines, you will play a key role in defining the technical architecture for our companys next generation of data-centric security.
What will you do?
Primary responsibilities include:
Lead, design and implement low-level agent modules (using C++ or Rust), capable of monitoring data access and movement with minimal performance overhead.
Research and evaluate technologies for building high-fidelity sensors that track data access.
Develop robust, scalable, and performant code that operates reliably across multiple operating systems and environments.
Collaborate closely with Core Agent, Backend, and Frontend teams to deliver a unified, user-facing, next-generation data protection product.

we are looking for a Python Linux Software Developer.
As a Senior Software Developer in Labs, your daily mission involves designing and developing advanced capabilities to extract digital evidence from modern Android and iOS devices. You will tackle some of the toughest security protections such as PAC, Secure Elements, Code Signing, Hypervisors, and more. Working in the heart of the Digital Intelligence Labs group, you will contribute to productizing world-unique capabilities that enable law enforcement and private sector customers to conduct legally sanctioned forensic investigations effectively and securely.
This role requires a combination of deep technical knowledge, creativity, and persistence to solve complex problems while collaborating closely with top researchers and engineers. Your work will have a direct impact on investigations that save lives and uphold justice globally.
Key Responsibilities:
Lead and contribute to the development of new extraction technologies for Android and iOS platforms.
Analyze and reverse-engineer low-level OS internals and security mechanisms.
Develop robust system-level software in C, C++, and Python.
Collaborate with cross-functional teams to design, test, and integrate new capabilities into Digital Intelligence platform.
Stay current with emerging mobile security technologies and forensic challenges.
Share knowledge and best practices within the team to elevate overall engineering quality.

We are looking for a Technical Lead to drive the architectural direction and engineering excellence of this group. This is a senior, deeply hands-on role for a technology leader who can own the technical roadmap, mentor a team of elite engineers, and build the infrastructure that challenges platform to its theoretical limits.
What You'll Lead:
Define and own the technical architecture of the group's distributed testing and reliability platform - designing for massive scale, real-world workload simulation, and adversarial failure injection
Lead effort involving multiple engineers, setting technical standards, running architecture reviews, driving design decisions, and mentoring engineers to grow
Build the systems that orchestrate millions of concurrent IO operations, inject chaos at the infrastructure layer (latency, packet loss, hardware failures), and expose the hardest-to-find race conditions and consistency bugs
Advance AI-driven approaches to test automation: intelligent scenario generation, LLM-augmented root-cause analysis, and autonomous validation pipelines
Drive observability and reliability engineering across the group - building telemetry pipelines that track P99 latency, jitter, and system health, turning quality into a quantitative discipline
Collaborate deeply with Core R&D, Storage Kernel, and Infrastructure teams - translating architectural knowledge into targeted reliability strategies
Establish engineering practices - design docs, production-grade code reviews, testing philosophy, and cross-team technical alignment

Own the pipeline that turns raw endpoint telemetry into security intelligence. You'll work at the core of Neo: the ingestion and enrichment path that takes reports from tens of thousands of endpoints, extracts and deduplicates software, and runs an AI research pipeline that classifies and risk-scores every tool. You'll design the data model, the public API our dashboard and customers depend on, and the auth and identity layer that ties it all to real organizations.

What you'll work on

The event-driven ingestion pipeline: S3 uploads → Lambda processors → Postgres, with idempotent processing, stale-work reaping, and back-pressure at scale.

The AI enrichment and researcher system - orchestrating LLM-backed agents, handling contradictions, and keeping cost and latency in check.

The public REST API (Hono), its typed schemas, and the generated clients that consume it.

Authentication, SSO/SAML federation, and multi-tenant identity and authorization.

Data modeling and schema evolution you can ship without downtime.

we are looking for a Tech Lead Engineer.
Responsibilities:
Drive the technical strategy for cross-platform endpoint agent, focusing on C#/.NET core logic while ensuring production readiness across macOS, Windows, and Linux.
Provide technical leadership to a distributed team of engineers, raising technical expertise and engineering practices across the organization.
Own features from discovery to delivery, solving complex domain problems across a managed fleet of enterprise devices.
Maintain a hands-on approach by writing code and mentoring engineers to elevate the organization's technical capabilities.
Architect the agent using C# and platform-specific extensions, ensuring performant integration with each operating system's security frameworks.
Own high-impact technical decisions that balance velocity, security, and reliability.
Deliver maintainable features supported by comprehensive testing, metrics, and monitoring.
Shape the agent roadmap and ensure resilient production systems in collaboration with cross-functional leadership.
Participate in design and code reviews to maintain high engineering standards.
Champion AI-assisted engineering across the team - set the bar for how coding agents accelerate delivery, and establish the practices and guardrails that keep output production-grade.

The Falcon Secure Access (FSA) team at CrowdStrike is expanding. As a Senior Software Engineer on our team, you will architect and deliver a next-generation secure access platform that converges Zero Trust Network Access with browser-native security.

You'll build the core systems that enable users to seamlessly and securely access internal sites, private applications, and cloud resources directly from the browser - without legacy VPNs or remote desktops - while enforcing real-time protection against zero-day exploits, phishing, data exfiltration, and unauthorized access.

This role sits at the intersection of network engineering and browser security: you'll design and implement advanced proxy communication, secure tunneling, and identity-aware routing - all operating at the browser's core to deliver holistic protection including DLP, insider threat detection, SaaS security, and continuous zero-trust verification.

What You'll Do:

Design and build ZTNA infrastructure - implement zero-trust access policies, secure tunneling, and identity-aware network routing that replaces traditional VPN architectures

Develop advanced networking solutions - build and optimize proxy communication layers, WebSocket-based transport, and encrypted client-to-server channels that handle millions of concurrent connections

Architect high-scale backend systems - design distributed microservices for policy enforcement, real-time threat detection, and access control at scale using Node.js / TypeScript

Implement secure client-server communication - design highly secured agent-to-cloud architectures with certificate pinning, mutual TLS, and encrypted tunneling protocols

Build browser-native security components - develop browser extensions and agents (Chrome, Edge, Firefox etc.) that enforce data protection, prevent data leakage, and provide granular visibility and control

Own features end-to-end - from design through delivery, including deployment and monitoring

Influence architecture and roadmap - play a key role in architectural decisions, building toward an efficient distributed zero-trust architecture

Research and develop - drive new initiatives and POCs in zero-trust access domains and browser security

Collaborate cross-functionally - work with security researchers, product, and platform teams across multiple locations to solve complex problems