Endpoint Engineer
Cylake
Endpoint Engineer
Cylake
AI-powered on-prem security platform for government
Join a small team building the next generation of cybersecurity products from the ground up. Led by industry veterans with a proven track record of success - you will get to architect, build, and deliver hugely impactful products with this world class team. You will have the opportunity to grow your career and skills along with the company from the very start.
You will serve as a technical leader responsible for building our core endpoint security agent from the ground up, providing comprehensive visibility and protection across Windows, Linux, and macOS. You will architect a lightweight, highly resilient agent capable of deep OS introspection, autonomous threat prevention, and sophisticated offline telemetry spooling. You will tackle complex challenges in user-mode hooking, kernel-level behavioral analysis, anti-tampering, and distributed systems design to deliver a seamless, high-performance security client.
5+ years of experience in systems-level programming and architecting highly concurrent applications
Strong Rust programming skills with a focus on high-performance, low-level OS integrations
Deep understanding of Windows OS internals, including ETW, IPC, Named Pipes, and Windows Services
Experience with cross-platform endpoint telemetry collection utilizing Linux eBPF and macOS ESF
Proven experience in dynamic binary instrumentation, user-mode API interception, and process injection
Experience designing and optimizing low-overhead threat detection heuristics directly on the endpoint
Knowledge of Windows kernel-mode components, specifically designing File Filter Drivers for data-in-motion tracking
Experience architecting resilient distributed systems with offline disk spooling and secure mTLS synchronization
Understanding of offensive and defensive endpoint security concepts, anti-tampering mechanisms, and process protection
Experience building highly reliable agent lifecycles, self-healing architectures, and fail-safe rollback mechanisms
Strong communication and documentation skills
Experience with Microsoft Anti-Malware vendor registration (ELAM, PPL) is a plus
Experience with browser extension development or DOM hooking is a plus
We offer competitive compensation and a comprehensive benefits package designed to support our employees’ health, well-being, and long-term success. The expected salary range for this position is $150,000 – $250,000 per year. Within this range, individual pay is determined based on job-related factors including skills, experience, qualifications, and internal equity. Most candidates can expect an offer within the range listed above. Your recruiter will provide additional details on compensation and benefits to qualified candidates during the hiring process.
We’re committed to building a diverse, inclusive workplace where everyone can do their best work. We are proud to be an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. If you require a reasonable accommodation during the application or interview process, please let us know — we’re happy to support you.
This position requires access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Any offer of employment will be conditioned on authorization to receive software or technology controlled under these laws and regulations without sponsorship for an export license.
Cylake builds an AI-native security platform designed for government agencies and highly regulated enterprises that cannot use public cloud. It provides on-premises and private-cloud appliances that collect enterprise data into a single data lake to support detection, investigation, and AI-powered workflows without phoning home. The platform is operated entirely within customers’ environments, using local data storage and processing to maintain control and compliance. Cylake differentiates itself through deep government/regulated focus, a leadership team with experience from Palo Alto Networks and SentinelOne, and a cloud-free approach that keeps data and analytics inside customer premises. The company aims to reach beta in late 2026 and general availability in 2027, backed by significant venture funding to develop the platform and expand the team.
Explore more opportunities at Cylake