Cylake Inc
Windows System Software Engineer
Sunnyvale. Posted 3 months ago
The role
You will design and build low-level endpoint infrastructure for real-time telemetry, behavioral detection, and system instrumentation. This involves working across kernel-mode and user-mode to develop production-grade systems for modern Windows environments.
What you will do
- Design and develop production-quality Windows kernel drivers using WDM/WDF.
- Build kernel instrumentation and telemetry pipelines for endpoint visibility.
- Develop high-performance process, thread, and image lifecycle tracking.
- Implement scalable kernel callback infrastructure.
- Design lock-efficient kernel data structures and synchronization strategies.
- Build reliable user/kernel communication mechanisms.
- Debug complex concurrency, synchronization, and memory issues.
- Work with Windows NT internals including memory management, Object Manager, and ETW.
- Design telemetry systems that power endpoint detection and response.
- Research modern attack techniques and operating system abuse.
Required qualifications
- Extensive experience building low-level Windows systems software.
- Deep expertise in Windows kernel architecture and NT internals.
- Extensive experience developing Windows kernel drivers.
- Strong knowledge of process, thread, memory, and object management.
- Expert-level C/C++ programming skills.
- Experience debugging complex multithreaded systems.
- Strong understanding of synchronization, paging, interrupts, and x64 architecture.
- Experience using WinDbg and kernel debugging tools.
- Ability to reason about undocumented operating system behavior through analysis and debugging.
Nice to have
- Rust experience.
- Filesystem minifilters.
- Windows Filtering Platform (WFP) or NDIS.
- ETW provider development.
- Hypervisor technologies (VT-x / AMD-V).
- Secure Kernel, VBS, or HVCI knowledge.
- Memory forensics or reverse engineering experience.
- Symbol parsing and Windows build analysis.
Benefits
- Competitive compensation
- Comprehensive benefits package
Before you apply
- Requires access to information protected under U.S. export control laws and regulations (EAR and ITAR).
- Employment is conditioned on authorization to receive software or technology controlled under these laws without sponsorship for an export license.
About the company
cylake-inc is a small team building the next generation of cybersecurity products from the ground up, led by industry veterans.