Endpoint Engineer

Cylake•Sunnyvale, CA

19h

About The Position

Join a small team building the next generation of cybersecurity products from the ground up. Led by industry veterans with a proven track record of success - you will get to architect, build, and deliver hugely impactful products with this world class team. You will have the opportunity to grow your career and skills along with the company from the very start. You will serve as a technical leader responsible for building our core endpoint security agent from the ground up, providing comprehensive visibility and protection across Windows, Linux, and macOS. You will architect a lightweight, highly resilient agent capable of deep OS introspection, autonomous threat prevention, and sophisticated offline telemetry spooling. You will tackle complex challenges in user-mode hooking, kernel-level behavioral analysis, anti-tampering, and distributed systems design to deliver a seamless, high-performance security client.

Requirements

5+ years of experience in systems-level programming and architecting highly concurrent applications
Strong Rust programming skills with a focus on high-performance, low-level OS integrations
Deep understanding of Windows OS internals, including ETW, IPC, Named Pipes, and Windows Services
Experience with cross-platform endpoint telemetry collection utilizing Linux eBPF and macOS ESF
Proven experience in dynamic binary instrumentation, user-mode API interception, and process injection
Experience designing and optimizing low-overhead threat detection heuristics directly on the endpoint
Knowledge of Windows kernel-mode components, specifically designing File Filter Drivers for data-in-motion tracking
Experience architecting resilient distributed systems with offline disk spooling and secure mTLS synchronization
Understanding of offensive and defensive endpoint security concepts, anti-tampering mechanisms, and process protection
Experience building highly reliable agent lifecycles, self-healing architectures, and fail-safe rollback mechanisms
Strong communication and documentation skills

Nice To Haves

Experience with Microsoft Anti-Malware vendor registration (ELAM, PPL) is a plus
Experience with browser extension development or DOM hooking is a plus

Responsibilities

Architect, build, and deliver hugely impactful products.
Serve as a technical leader responsible for building our core endpoint security agent from the ground up.
Provide comprehensive visibility and protection across Windows, Linux, and macOS.
Architect a lightweight, highly resilient agent capable of deep OS introspection, autonomous threat prevention, and sophisticated offline telemetry spooling.
Tackle complex challenges in user-mode hooking, kernel-level behavioral analysis, anti-tampering, and distributed systems design to deliver a seamless, high-performance security client.