Lead Endpoint Security Architect — Rust & Cross-Platform

Cylake; Sunnyvale (CA); On-site; USD 150,000 - 250,000; Full time

Job summary

Cylake is seeking a technical leader to architect and build a cross-platform endpoint security agent for Windows, Linux, and macOS. You will focus on high-performance, low-overhead OS integrations, including user-mode hooking and kernel-aware components, with offline telemetry and secure mTLS synchronization.

You will tackle complex challenges in anti-tampering, distributed systems design, and self-healing agent lifecycles.

Qualifications

• 5+ years in systems-level programming and architecting concurrent applications.
• Strong Rust with low-level OS integrations.
• Experience with Windows internals (ETW, IPC, Named Pipes, Services).

Responsibilities

• Architect and build the core endpoint security agent for Windows, Linux and macOS.
• Deliver high-performance, secure client with offline telemetry spooling and robust fail-safes.

Skills

Systems-level programming

Rust

Windows internals

Linux eBPF

macOS ESF

Dynamic binary instrumentation

User-mode API interception

Process injection

Threat-detection heuristics

Windows kernel drivers

Distributed systems

mTLS synchronization

Anti-tampering concepts

Agent lifecycles/self-healing

Documentation

ELAM/PPL knowledge

Browser extension/DOM hooking

Job description

Cylake is seeking a technical leader to architect and build a cross-platform endpoint security agent for Windows, Linux, and macOS. You will focus on high-performance, low-overhead OS integrations, including user-mode hooking and kernel-aware components, with offline telemetry and secure mTLS synchronization.

You will tackle complex challenges in anti-tampering, distributed systems design, and self-healing agent lifecycles.