Staff Software Engineer - Control Plane

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.
 
At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.
 
AI Fearlessly.

About TrendAI™ 

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. 

At TrendAI™, we’re always seeking exceptional talent: people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. 

AI Fearlessly. 

Position Summary: 

TrendAI is seeking a Staff Software Engineer to evolve the Control Plane of the Threat Protection System (TPS), the management layer of our on-premises network security appliance. The Control Plane sits alongside the data plane and delivers the configuration, telemetry, high availability, and management surfaces that customers depend on. This role works primarily in modern C++(C++17 moving to C++23) on Linux, extending the CLI, management services, configuration engine, the programmatic API consumed by our central management console, and the REST API and React web UI served from the device.

Value delivered to the broader unified security platform flows through the central management console, so a strong, well-versioned programmatic API surface is central to this role. This is a senior IC role. You will own features end to end, lead technical direction, mentor engineers, and represent the Control Plane in cross-team architecture discussions with the data plane and engine team.

Work Location: Austin, Texas, Hybrid: 3 days in office (Tuesday, Wednesday, Thursday)

What You’ll Do: 

Design, build, and maintain scalable, secure, and maintainable services in modern C++ (C++17 moving to C++23) across the Control Plane, including the CLI, management daemons, and supporting libraries. Extend the configuration management subsystem, including validation, commit and save semantics, and compilation of high level policy into the low level form consumed by the data plane. Build and evolve the on-device REST API surface and the React based web UI it serves, delivering a modern management experience alongside the long standing CLI and programmatic interfaces. Own the design and evolution of the inter-process communication layer between the Control Plane and the data plane, balancing throughput and latency as the stack modernizes. Partner with the data plane and engine team on interface changes. Own and evolve the programmatic API surface consumed by the central management console, applying strong versioning and backward compatibility discipline. This API is the primary channel through which TPS delivers value into the broader TrendAI Vision One platform, so schema stability, forward-looking design, and cross-release compatibility are first order concerns. Contribute to technical design for cross cutting Control Plane concerns such as high availability, failover, configuration replication, and upgrade and migration paths. Deliver features that improve device manageability, telemetry, health reporting, and certificate lifecycle, presented through the management console API and the on-device management surfaces. Author and evolve automated tests, including C++ unit suites, Python driven system tests, REST and UI test harnesses, and CI jobs, and uphold static analysis and coding standard compliance in the areas you own. Debug hard problems across the stack using core files, GDB, live daemons on hardware, packet captures with tcpdump and Wireshark, and inter-process traces, often on customer reported failures with limited reproducibility. Investigate complex production support cases, particularly the ones that require domain expertise about a customer's environment, an interop quirk with a specific network or upstream device, or the judgment to propose a different approach to the underlying problem rather than only patching the reported symptom. Shape the team's AI-augmented development workflow, including which categories of work run autonomously, where humans gate before merge or deploy, and what validation is nonnegotiable for a security product with a demanding compliance and reliability bar. Collaborate with Product Managers, Architects, QA, Sustaining, and the data plane and engine team to scope features, converge on interfaces, and land changes that ship on TPS appliances, both physical and virtual. Mentor engineers on the Control Plane team through code review, design review, and evolution of the team's C and C++ patterns.

What You Should Have: 

Required: 

• 6+ years of professional experience building production systems software in C++ (C++17 or later) on Linux, with meaningful exposure to C in a mixed language codebase.
•  Working knowledge of POSIX and Linux systems programming, including processes and threads, event driven I/O, and inter-process communication over sockets.
• Strong grasp of TCP/IP networking fundamentals and appliance side concerns, including routing, HA and failover semantics, and packet level debugging with tcpdump or Wireshark.
•  Experience designing and consuming REST APIs, including resource modeling, versioning, authn and authz, and error semantics.
• Experience with a long lived RPC or service protocol where schema stability and backward compatibility matter (SOAP and WSDL, gRPC, or comparable).
• Experience with shell scripting and Python for build tooling, automation, and system level testing.
• Fluency with modern C++ build and quality tooling, including a mainstream build system (CMake or Make), GDB, a sanitizer or memory analyzer (AddressSanitizer or Valgrind), and a unit test framework.
• Demonstrated experience using an agentic coding assistant (such as Claude Code, Cursor, or comparable) in real engineering work, and the judgment to direct it toward useful outcomes, review its output critically, and validate its correctness before it reaches shared branches.
• Comfort with Git based development on a large mono-repo, code review discipline, and CI/CD via Jenkins.
• Track record of shipping features into released, on-premises appliance software where hotfix is not a first class option, including thinking about upgrade paths, migration, and backward compatibility across releases.
• Strong communication skills and a demonstrated ability to lead technical discussion, drive design reviews, write durable technical documentation, and mentor engineers of varying seniority.
• BS in Computer Science, Computer Engineering, or a related field, or equivalent practical experience. Advanced degree welcome but not required.

Preferred:

• On-premises network security appliances such as IPS, IDS, firewall, load balancer, or router platforms, where the split between a management layer and a packet processing layer is a first class architectural concern.
• Familiarity with data plane and packet engine concepts (DPDK, kernel bypass, or userspace networking) sufficient to collaborate with a data plane team on the interface between the two layers.
• Working knowledge of React and modern JavaScript or TypeScript front end development, enough to contribute meaningfully to an on-device web UI and collaborate with front end focused engineers.
• Modern web on embedded or appliance devices, including REST served from a resource constrained on-premises device, with attention to auth session lifecycle, TLS and certificate handling, and CSRF and XSS hardening under a hostile threat model.
• Managing device fleets through a central management console, including designing the programmatic API on the device side, evolving that API across releases, and reasoning about how feature value reaches customers through that console rather than directly from the device.
•  High availability design and debugging, including quorum, split brain, state replication, failover timing, and the operational failure modes that follow.
  Familiarity with containerized development environments and reproducible builds.
• Experience contributing to or maintaining an internal coding standard for a mature C and C++ codebase, and helping newer contributors converge on team patterns.

 Bonus eligibility: Eligible for the company-wide performance bonus.

Final pay within this range depends on factors including relevant work experience, skills, and certifications. 

What We Offer You: 

You’re important to us. What matters to you matters to us too. TrendAI™ provides benefit options for you and your family: 

• Comprehensive medical, dental, and vision insurance 

• Life insurance 

• Short- and long-term disability 

• Prenatal, maternity, parental, and medical leave 

• Mental health wellness program 

• Adoption assistance 

• Wellness incentive 

• Pet insurance 

• 401(k) with company match 

• Paid time off 

• 14 annual holidays 

• Tuition assistance 

• Employee resource groups 

We offer competitive compensation with bonus opportunity tied to company performance, along with room to enhance your skills through ongoing learning and broad technological opportunities. Achieving work-life balance is a priority, complemented by team activities and an environment rooted in equity, inclusion, and collaboration, reflected in both our culture and our work. 

This role is not eligible for employer-provided work visa sponsorship, now or in the future. Candidates must be legally authorized to work in the United States for this employer without sponsorship. 

Be Passionate. Be Innovative. Be a Trender. 

#LI-BM1

TrendAI™ (a business unit of Trend Micro Incorporated) provides equal employment opportunity to all applicants and employees and does not unlawfully discriminate on the basis of race, color, religion, creed, sex, pregnancy and childbirth or related medical conditions, sexual orientation, gender identity or expression, national origin, ancestry, citizenship status, age, physical or mental disability, medical condition, genetic information, marital status, family care or medical leave status, veteran or military status, or any other characteristic protected by applicable law. 

TrendAI™ is committed to providing reasonable accommodations for qualified individuals with disabilities. If you need an accommodation to participate in the application or interview process, please contact [email protected].