As a Windows Low Level Engineer - Endpoint security, you will design and develop advanced security features for SentinelOne’s Windows endpoint protection platform, operating across both user-mode and kernel-mode environments. You will build and optimize mission-critical components including anti-tampering protections, network sensors, and agent infrastructure while solving complex performance and stability challenges at massive scale. By researching Windows internals and debugging deep system issues, you will collaborate with distributed engineering teams to deliver high-impact security capabilities protecting millions of devices worldwide.

We are seeking a highly skilled and experienced Software Engineer with a strong background in low-level C++ programming and a deep understanding of Windows OS, to help us in developing our Endpoint Protection product, the core part of our business, and to join one of our Platform group teams. (We're currently growing multiple teams and are open to new colleagues with a wide variety of backgrounds within Windows development!).

The Platform group teams are in charge of some of our most complex low-level areas, such as:

• Windows agent’s Anti-Tampering (self-protection from malware attempting to harm the agent), network sensors, device control, and other kernel-side features involving both research and development,
• usermode security & agent infrastructures - e.g. installers, logging, services such as communication layer & interfaces for our Windows agent, for improving the quality, performance & stability of the agent and making the user experience smoother.

By joining our group, you will collaborate with talented engineers who are leading a feature through the whole development lifecycle. Your work will have an impact on millions of endpoints in one of the mainstream areas of the EPP/EDR agent of SentinelOne - a product recognized 5x-in-a-row as Gartner MQ Leader, scoring highly in many MITRE Att&ck assessments, valued by users in Gartner Peer Insights and more.

What will you do?

• As a new member of one of our distributed development teams, you will work in both user-mode & kernel-mode, and deal with a large variety of fields.
• You will have the chance to design, develop primarily in modern C++ (23), test and debug the most complicated real-world problems (often unseen before). In order to successfully deal with this challenge, you will continuously enrich your knowledge and experience with Windows OS internals & Kernel, Endpoint Protection, and Endpoint Detection & Response eco-system.
• Our teams design and execute significant new features, as well as rewrite and reimplement the existing ones from scratch. You will also deal with extraordinary performance & optimization challenges, given the scale of our cybersecurity SW (handling hundreds of billions of events every day).
• Your work will influence the security of tens of millions of Windows devices, that we protect at enterprise & government customers across the globe (incl. 4 of Fortune 10 and hundreds of Global 2000).
• You’ll also be encouraged to share knowledge within both Platform teams and the broader Windows group.

What skills & knowledge should you bring?

• Multiple years of experience as a software engineer in the area of lowlevel programming using modern C++ (or using C and a willingness to learn modern C++)
• Hands-on experience and in-depth understanding of Windows OS design & internals, Windows low-level development, with debugging of Windows applications and familiarity with related standard debugging and profiling tools
• Previous experience working on a production-grade product with a wide-scale deployment
• Great communication skills and the ability to work both independently and with peers from different time zones, problem-solving and out-of-the-box thinking
• Attention to detail and high coding standards
• An advantage: experience with Windows Kernel and Windows Drivers development, experience in security-oriented development, with reversing or malware analysis

Why Us? 

Join a cutting-edge company tackling extraordinary challenges alongside top industry talent. Enjoy flexible hybrid work in Prague (Karlin), Brno (Clubco), or remotely across CZ/SK. Only Prague-based employees are required to work from the office at least two days per week.

Competitive Benefits Package:

• Stock & Bonuses: Grant of Restricted Stock Units with a 4-year vesting plan, annual performance-based bonuses, and an employee stock purchase plan.
• Time Off & Well-being: Flexible Time Off, on top of the standard 5 weeks vacation, flexible paid sick days, fully paid Short Term Sick/Nursing Leave, 16-week parental leave, grandparent leave, and additional company holidays.
• Insurance & Health: Pension Insurance Contribution, Premium life insurance, Private medical care (for you and +1), and a Global Employee Assistance Program.
• Work Perks: Monthly meal and well-being allowance, high-end MacBook/Windows laptop, work-from-home support, and in-office refreshments.
• Growth & Community: LinkedIn Learning, internal mentoring, educational support, generous referral bonuses, and optional company events (sports, BBQs, charity).

Be part of an inclusive, innovative workplace that values belonging, flexibility, and growth!

This role is offered as a hybrid in Brno, Czech Republic. We are only able to accept applications for those based in the Czech Republic or who have sponsorship to live and work in the Czech Republic. 

What you’ll do at Jamf: 

At Jamf, we empower people to be their best selves and do their best work. The Jade team makes sure that only enrolled, company-managed devices used by authorized users can access business-critical resources over the network. We own Jamf's DNS infrastructure: gateways that enforce security policies, content filtering, and threat blocking in real time across hundreds of millions of daily requests. We also own a distributed key-value store built on Raft consensus for low-latency reads at edge locations. Everything runs on AWS EKS.

This role is also about shaping how we build. We're rethinking our workflows and engineering culture around AI-assisted development, and we need someone who wants to be part of that - not watching from the side, but helping steer it.

What you can expect to do in this role: 

Our stack currently includes Go and Java, but we don't expect you to know both (or either) on day one. What matters is that you've worked seriously in at least one strongly typed language and can pick up another when the job calls for it. With the AI tooling available today, that ramp-up is faster than ever.

The main challenge is scale. We're preparing for significant traffic growth, and you'll help figure out what needs to change and make it happen. You'll also spend time improving how we run things: dashboards, alerting, runsheets, synthetic monitoring.

On top of that, you're joining a team that's actively changing how it works. We use Claude Code daily. You'll help us get better at it - building judgement about when AI tools help and when they don't, working closely with product, and raising the bar on our craft.

You'll join the on-call rotation once ramped up (team of 6, one week each, low noise). This is a Senior Software Engineer role, and we expect impact beyond the team - cross-team initiatives, knowledge sharing, being a voice in broader conversations.

#LI-Hybrid 

 What we are looking for: 

• Solid experience in at least one strongly typed language (Go, Java, C++, C#, Rust, or similar).
• System design thinking. Distributed systems, failure modes, consistency trade-offs, what breaks at 10x scale.
• Critical thinking and good judgement. You question assumptions and make reasoned calls under uncertainty.
• Ability to learn fast. New language, new framework, new domain - you figure it out. This matters more than what's on your resume today.
• Real experience with AI-assisted development (Claude Code, Copilot, or similar). You've used these tools in your actual work, you know their limits, and you're ready to help the team use them well.
• Readiness for a challenging period. AI is changing how software gets built. We want someone who sees that as an opportunity and wants to help the team build the skills that count: agency, judgement, close collaboration with product.
• Clear communication. You explain technical decisions plainly, give and take direct feedback, and work across teams.
• Backend experience at scale. High-throughput services, observability, operational excellence. Familiarity with DNS, Kubernetes, or AWS is a plus, not a requirement.
• No ego. Small team, lots of trust, everyone learns from each other.

 Why Jamf? 

• We are progressive but laid back. You are free to be a yourself and work how you work best. Here, you manage your own day and your own work style.  

• You will have the opportunity to work with a small and empowered team where the culture is based on trust, ownership, and respect. 

• With hybrid and remote roles, we offer an open flexible culture based on respect and trust. 

• Benefits are a critical part of the “whole employee experience”. Our benefits package includes 30 days of paid time off, 3 paid days to volunteer, Benefit Plus cafeteria, Multisport Card, and more. 

• Visit our Jamf Engineering blog to learn more about the innovative projects our team is working on and what we learn from each challenge we solve. A blog written by engineers, for engineers at medium.com/jamf-engineering