Cylake Inc

Endpoint Engineer

Sunnyvale. Posted 8 months ago

The role

You will serve as a technical leader responsible for building a core endpoint security agent. You will architect a lightweight agent for Windows, Linux, and macOS that provides visibility and protection.

What you will do

  • Build the core endpoint security agent from the ground up
  • Architect a lightweight, highly resilient agent
  • Provide visibility and protection across Windows, Linux, and macOS
  • Tackle challenges in user-mode hooking, kernel-level behavioral analysis, anti-tampering, and distributed systems design

Required qualifications

  • 5+ years of experience in systems-level programming and architecting highly concurrent applications
  • Strong Rust programming skills with a focus on high-performance, low-level OS integrations
  • Deep understanding of Windows OS internals, including ETW, IPC, Named Pipes, and Windows Services
  • Experience with cross-platform endpoint telemetry collection utilizing Linux eBPF and macOS ESF
  • Proven experience in dynamic binary instrumentation, user-mode API interception, and process injection
  • Experience designing and optimizing low-overhead threat detection heuristics directly on the endpoint
  • Knowledge of Windows kernel-mode components, specifically designing File Filter Drivers for data-in-motion tracking
  • Experience architecting resilient distributed systems with offline disk spooling and secure mTLS synchronization
  • Understanding of offensive and defensive endpoint security concepts, anti-tampering mechanisms, and process protection
  • Experience building highly reliable agent lifecycles, self-healing architectures, and fail-safe rollback mechanisms
  • Strong communication and documentation skills

Nice to have

  • Experience with Microsoft Anti-Malware vendor registration (ELAM, PPL)
  • Experience with browser extension development or DOM hooking

Benefits

  • Competitive compensation
  • Comprehensive benefits package

Before you apply

  • Requires access to information protected under U.S. export control laws and regulations, including EAR and ITAR
  • Employment is conditioned on authorization to receive software or technology controlled under these laws without sponsorship for an export license

About the company

cylake-inc is a small team building the next generation of cybersecurity products from the ground up, led by industry veterans.