{"id":14252,"url":"https://alion.io/job/nightfall-endpoint-engineer-linux","title":"Endpoint Engineer - Linux","company":{"id":2061,"name":"Nightfall","domain":"nightfall.ai","url":"https://alion.io/company/nightfall","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":48000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":43},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"C++","optional":false},{"name":"CentOS Stream","optional":false},{"name":"Cloudflare","optional":false},{"name":"containerd","optional":false},{"name":"DLP","optional":false},{"name":"Docker","optional":false},{"name":"Dropbox","optional":false},{"name":"eBPF","optional":false},{"name":"Linux","optional":false},{"name":"Okta","optional":false},{"name":"Ubuntu","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true},{"name":"SentinelOne","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-05-18T13:42:41Z","employer_posted_date":"2026-05-18","last_verified_at":"2026-10-16T10:39:33Z","board_verified":true,"closed_at":null,"days_open":150,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":150},"description":"About Nightfall:\nNightfall is the AI-native, unified data loss prevention and insider risk management platform that protects sensitive data across SaaS apps, GenAI tools, email, endpoint devices, and more. Hundreds of customers, spanning AI innovators to top 10 banks, trust Nightfall to detect and stop data exfiltration at scale. Nightfall enables organizations to innovate freely without the risks of losing intellectual property or exposing customer data. Our agentic platform helps security teams regain their time by putting data loss prevention on autopilot. With automatic remediation, security violations can be resolved automatically before they become incidents, and end-users can be automatically trained and coached in the moment to self-heal violations that they introduce.\nNightfall is backed by leading VC firms including Bain Capital Ventures (Enrique Salem - former CEO of Symantec), Venrock (early investors in Cloudflare), WestBridge Capital, Pear VC (early investors in Dropbox and Doordash), and a cadre of cybersecurity leaders including Frederic Kerrest (founder of Okta), Maynard Webb (former COO of eBay), Ryan Carlson (President of Chainguard), Kevin Mandia (founder of Mandiant), and many others.\nAbout the role:\nNightfall is expanding its endpoint Data Loss Prevention (DLP) coverage to Linux, and we are looking for a seasoned Endpoint Engineer to lead this effort. You will be at the ground level of building Linux agent capabilities from the ground up, working alongside our existing Mac and Windows endpoint teams.\nAs an Endpoint Engineer (Linux) at Nightfall, you will design, build, and maintain a production-grade, AI-native DLP agent for Linux - covering kernel-level event interception, userspace policy enforcement, and enterprise deployment. This role requires deep Linux systems expertise and the drive to own a strategic new platform for the company.\nResponsibilities\nDesign and develop data exfiltration prevention applications, kernel modules, system services, and agents on Linux.\n\nBuild and maintain mission-critical endpoint agents that monitor and enforce DLP policies across Linux distributions (Ubuntu, RHEL/CentOS, and others).\n\nImplement kernel-level event interception using eBPF, LSM hooks, netfilter, fanotify, or similar mechanisms to monitor file, network, and clipboard activity.\n\nDevelop userspace components that integrate with kernel subsystems and enforce policy decisions in real time.\n\nCollaborate closely with the Mac and Windows endpoint teams to align on cross-platform agent architecture, shared policy models, and consistent DLP behaviors.\n\nOwn complex features from design to delivery - including scoping, implementation, testing, and customer-facing documentation.\n\nDiagnose and resolve deep systems-level issues including kernel panics, race conditions, file descriptor leaks, and IPC failures.\n\nEnsure agent reliability, upgrade safety, and minimal performance footprint on target Linux environments.\n\nWrite and maintain documentation covering internal architecture, public APIs, and deployment guides for enterprise customers.\n\nRequirements\nExpertise in C/C++ for Linux systems development; familiarity with Go is a strong plus.\n\nDemonstrable experience building production agents or system-level software on Linux.\n\nDeep hands-on experience with one or more Linux kernel subsystems relevant to security and monitoring:\n\nPractical knowledge of eBPF (including BPF CO-RE, libbpf, and BCC) for tracing, network filtering, and security enforcement.\n\nExperience with Linux Security Modules (LSM) - SELinux, AppArmor, or custom LSM hooks.\n\nWorking knowledge of fanotify, inotify, netlink, and procfs for system activity monitoring.\n\nFamiliarity with Linux namespaces, cgroups, and container runtimes (Docker, containerd) in enterprise deployments.\n\nExperience with kernel-level debugging using tools such as ftrace, perf, crash, SystemTap, or GDB with KGDB.\n\nAbility to use reverse engineering and binary analysis techniques when debugging kernel space code.\n\nFamiliarity with enterprise Linux deployment environments - MDM tools.\n\nAbility to decompose complex business problems and own them end to end across teams.\n\nMinimum 5+ years of related systems/endpoint engineering experience.\n\nNice to Have\nPrior experience building DLP, EDR, or endpoint security products on Linux.\n\nContributions to open-source Linux kernel or eBPF ecosystem projects.\n\nExperience with FUSE (Filesystem in Userspace) or overlayfs for file activity interception.\n\nKnowledge of Linux audit subsystem (auditd) and its integration with SIEM tooling.\n\nExperience developing or integrating with XDR/EDR platforms (CrowdStrike, SentinelOne, or similar).\n\nFamiliarity with clipboard and X11/Wayland display server internals for content inspection.\n\nBackground in Go for high-performance agent components.\n\nEnvironment\nNightfall AI takes pride in being an equal-opportunity employer. We value a diverse and global talent pool and the collaboration that results from having a diverse and inclusive team. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. Our hiring decisions are based exclusively on merit, qualifications, and business needs.\nCompensation\nEmployee compensation will be determined based on interview performance, level of experience, specialization of skills, and market rate. During the offer discussion, your recruiter will review the finalized base salary, bonus (for applicable roles), benefits & perks, and stock options as they’ll be reflected in the offer letter.","description_format":"text","description_chars":5656,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Stock options"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Data Loss Prevention"],"lifecycle":[{"event":"open","at":"2026-05-18T13:42:41Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.369,"p_room":0.28,"age_days":150,"expected_fill_days":38,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/nightfall-endpoint-engineer-linux","json_url":"https://alion.io/job/nightfall-endpoint-engineer-linux.json","meta":{"generated_at":"2026-10-16T10:47:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9342,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2061},"rest":"https://alion.io/mcp/rest/get_company?id=2061"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnightfall-endpoint-engineer-linux"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnightfall-endpoint-engineer-linux"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnightfall-endpoint-engineer-linux"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nightfall-endpoint-engineer-linux\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnightfall-endpoint-engineer-linux"}]}