Skip to main content

Cylake

Windows System Software Engineer

Sunnyvale$150k–$250kfulltimemidAdded today

About this role

Join a cybersecurity startup building next-generation endpoint detection products. This role focuses on architecting low-level Windows kernel infrastructure, real-time telemetry systems, and behavioral detection capabilities for enterprise security environments.

What you'll do

  • Design and develop production Windows kernel drivers using WDM/WDF frameworks
  • Build kernel instrumentation pipelines and callback infrastructure for process, thread, and image lifecycle tracking
  • Architect user/kernel communication mechanisms and lock-efficient data structures
  • Develop telemetry systems that power endpoint detection and behavioral analysis
  • Debug kernel crashes, concurrency issues, and reverse engineer undocumented OS components
  • Research modern attack techniques and evaluate Windows security features for architecture impact

What they're looking for

  • Windows kernel driver development (WDM/WDF)
  • NT kernel internals and executive subsystems
  • C/C++ programming
  • Kernel debugging with WinDbg
  • ETW, ALPC, Object Manager, memory management
  • x64 assembly and architecture
  • Reverse engineering and binary analysis
  • Multithreaded systems and synchronization primitives
Apply on the employer's site

Opens the official application on the employer’s site. No login required.

Cylake

Cylake builds an AI-native cybersecurity platform that combines endpoint security agents, observability infrastructure, and petabyte-scale data lakehouse capabilities to detect and prevent threats across systems. The company is hiring for platform engineers, data architects, frontend engineers, and systems engineers to build core infrastructure, analytics pipelines, security agent technology, and user experiences for threat investigation.

View all jobs at Cylake

Likely interview questions

  • Walk us through your experience developing kernel drivers—what was the most complex callback infrastructure you've built?
  • How would you design a lock-efficient data structure for high-frequency process lifecycle events in kernel mode?