Join a small team to architect and build a core endpoint security agent for comprehensive visibility and protection across multiple OS.
Posted by employer 7 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 1 day ago
Skills & Technologies
Requirements
Not disclosed in this posting: work arrangement, visa sponsorship.
Benefits
Joblaze summary
In this role, the Endpoint Engineer will lead the development of a core security agent, focusing on creating a resilient and efficient product that offers comprehensive protection across multiple operating systems. Key skills include advanced Rust programming, systems-level architecture, and a deep understanding of Windows internals, alongside experience with Linux and macOS telemetry. This position is ideal for seasoned professionals with a strong background in cybersecurity and systems programming, looking to make a significant impact in a startup environment led by industry veterans.
Joblaze insights
Quick facts
From the original posting
Join a small team building the next generation of cybersecurity products from the ground up. Led by industry veterans with a proven track record of success - you will get to architect, build, and deliver hugely impactful products with this world class team. You will have the opportunity to grow your career and skills along with the company from the very start.
You will serve as a technical leader responsible for building our core endpoint security agent from the ground up, providing comprehensive visibility and protection across Windows, Linux, and macOS. You will architect a lightweight, highly resilient agent capable of deep OS introspection, autonomous threat prevention, and sophisticated offline telemetry spooling. You will tackle complex challenges in user-mode hooking, kernel-level behavioral analysis, anti-tampering, and distributed systems design to deliver a seamless, high-performance security client.
5+ years of experience in systems-level programming and architecting highly concurrent applications
Strong Rust programming skills with a focus on high-performance, low-level OS integrations
Deep understanding of Windows OS internals, including ETW, IPC, Named Pipes, and Windows Services
Experience with cross-platform endpoint telemetry collection utilizing Linux eBPF and macOS ESF
Proven experience in dynamic binary instrumentation, user-mode API interception, and process injection
Experience designing and optimizing low-overhead threat detection heuristics directly on the endpoint
Knowledge of Windows kernel-mode components, specifically designing File Filter Drivers for data-in-motion tracking
Experience architecting resilient distributed systems with offline disk spooling and secure mTLS synchronization
Understanding of offensive and defensive endpoint security concepts, anti-tampering mechanisms, and process protection
Experience building highly reliable agent lifecycles, self-healing architectures, and fail-safe rollback mechanisms
Strong communication and documentation skills
Experience with Microsoft Anti-Malware vendor registration (ELAM, PPL) is a plus
Experience with browser extension development or DOM hooking is a plus
Standard company text repeated across Cylake's postings is omitted here.