Verified today
Lead Endpoint Engineer, Linux
About the role
Nightfall AI's Endpoint Engineering team builds AI-native data loss prevention agents. As Lead Endpoint Engineer (Linux), you will design, develop, and maintain a production-grade Linux DLP agent, implementing kernel-level event interception and userspace policy enforcement. Remote work from India, collaborating with Mac and Windows endpoint teams to ensure cross‑platform security coverage.
What you’ll do
- Design and develop Linux kernel modules and agents for data exfiltration prevention
- Implement kernel‑level event interception using eBPF, LSM, netfilter, fanotify
- Develop userspace components for real‑time policy enforcement
- Collaborate with Mac and Windows teams on cross‑platform architecture
- Own feature delivery from design through testing and documentation
- Diagnose and resolve kernel panics, race conditions, and IPC failures
- Ensure agent reliability, upgrade safety, and minimal performance impact
- Write and maintain internal and public documentation
What you’ll bring
- 10+ years systems/endpoint engineering experience
- Expertise in C/C++ for Linux development
- Strong knowledge of eBPF, LSM hooks, fanotify, inotify
- Experience with Linux kernel subsystems and debugging tools
- Familiarity with Go is a strong plus
- Experience building production agents on Linux
- Understanding of container runtimes and namespaces
- Ability to own complex features end‑to‑end