---
title: 'Lead Endpoint Engineer - Linux at Nightfall AI'
canonical: 'https://feeny.ai/job/lead-endpoint-engineer-linux-nightfall-ai-bengaluru-kssyhq470n6k'
type: 'job'
last_seen: '2026-09-11'
---

# Lead Endpoint Engineer - Linux at Nightfall AI

- **Company:** Nightfall AI
- **Location:** Bengaluru, India
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-08-03
- **Last confirmed live:** 2026-09-11
- **Apply:** https://jobs.ashbyhq.com/nightfall-ai/791216d5-f01f-4139-895c-ad51c920eb2f

## Job description

About Nightfall: Nightfall is the AI-native, unified data loss prevention and insider risk management platform that protects sensitive data across SaaS apps, GenAI tools, email, endpoint devices, and more. Hundreds of customers, spanning AI innovators to top 10 banks, trust Nightfall to detect and stop data exfiltration at scale. Nightfall enables organizations to innovate freely without the risks of losing intellectual property or exposing customer data. Our agentic platform helps security teams regain their time by putting data loss prevention on autopilot. With automatic remediation, security violations can be resolved automatically before they become incidents, and end-users can be automatically trained and coached in the moment to self-heal violations that they introduce. Nightfall is backed by leading VC firms including Bain Capital Ventures (Enrique Salem - former CEO of Symantec), Venrock (early investors in Cloudflare), WestBridge Capital, Pear VC (early investors in Dropbox and Doordash), and a cadre of cybersecurity leaders including Frederic Kerrest (founder of Okta), Maynard Webb (former COO of eBay), Ryan Carlson (President of Chainguard), Kevin Mandia (founder of Mandiant), and many others. About the role: Nightfall is expanding its endpoint Data Loss Prevention (DLP) coverage to Linux, and we are looking for a seasoned Endpoint Engineer to lead this effort. You will be at the ground level of building Linux agent capabilities from the ground up, working alongside our existing Mac and Windows endpoint teams. As an Endpoint Engineer (Linux) at Nightfall, you will design, build, and maintain a production-grade, AI-native DLP agent for Linux - covering kernel-level event interception, userspace policy enforcement, and enterprise deployment. This role requires deep Linux systems expertise and the drive to own a strategic new platform for the company.

## Responsibilities

- Design and develop data exfiltration prevention applications, kernel modules, system services, and agents on Linux.
- Build and maintain mission-critical endpoint agents that monitor and enforce DLP policies across Linux distributions (Ubuntu, RHEL/CentOS, and others).
- Implement kernel-level event interception using eBPF, LSM hooks, netfilter, fanotify, or similar mechanisms to monitor file, network, and clipboard activity.
- Develop userspace components that integrate with kernel subsystems and enforce policy decisions in real time.
- Collaborate closely with the Mac and Windows endpoint teams to align on cross-platform agent architecture, shared policy models, and consistent DLP behaviors.
- Own complex features from design to delivery - including scoping, implementation, testing, and customer-facing documentation.
- Diagnose and resolve deep systems-level issues including kernel panics, race conditions, file descriptor leaks, and IPC failures.
- Ensure agent reliability, upgrade safety, and minimal performance footprint on target Linux environments.
- Write and maintain documentation covering internal architecture, public APIs, and deployment guides for enterprise customers.

## Requirements

- Expertise in C/C++ for Linux systems development; familiarity with Go is a strong plus.
- Demonstrable experience building production agents or system-level software on Linux.
- Deep hands-on experience with one or more Linux kernel subsystems relevant to security and monitoring:
- Practical knowledge of eBPF (including BPF CO-RE, libbpf, and BCC) for tracing, network filtering, and security enforcement.
- Experience with Linux Security Modules (LSM) - SELinux, AppArmor, or custom LSM hooks.
- Working knowledge of fanotify, inotify, netlink, and procfs for system activity monitoring.
- Familiarity with Linux namespaces, cgroups, and container runtimes (Docker, containerd) in enterprise deployments.
- Experience with kernel-level debugging using tools such as ftrace, perf, crash, SystemTap, or GDB with KGDB.
- Ability to use reverse engineering and binary analysis techniques when debugging kernel space code.
- Familiarity with enterprise Linux deployment environments - MDM tools.
- Ability to decompose complex business problems and own them end to end across teams.
- 10+ years of related systems/endpoint engineering experience.

## Nice to Have

- Prior experience building DLP, EDR, or endpoint security products on Linux.
- Contributions to open-source Linux kernel or eBPF ecosystem projects.
- Experience with FUSE (Filesystem in Userspace) or overlayfs for file activity interception.
- Knowledge of Linux audit subsystem (auditd) and its integration with SIEM tooling.
- Experience developing or integrating with XDR/EDR platforms (CrowdStrike, SentinelOne, or similar).
- Familiarity with clipboard and X11/Wayland display server internals for content inspection.
- Background in Go for high-performance agent components.

Environment Nightfall AI takes pride in being an equal-opportunity employer. We value a diverse and global talent pool and the collaboration that results from having a diverse and inclusive team. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. Our hiring decisions are based exclusively on merit, qualifications, and business needs.

## Compensation

Employee compensation will be determined based on interview performance, level of experience, specialization of skills, and market rate. During the offer discussion, your recruiter will review the finalized base salary, bonus (for applicable roles), benefits & perks, and stock options as they’ll be reflected in the offer letter.

## About Nightfall AI

## Company Overview
- **One-liner**: Nightfall AI is an AI-native data loss prevention (DLP) platform that protects sensitive data across SaaS apps, endpoints, email, browsers, and AI tools.
- **Entity Type**: Private (Series B)
- **Headquarters**: San Francisco, California, USA
- **Founded**: 2018
- **Founders**: Rohan Sathe, Isaac Madan, Anant Mahajan

## Core Business
- **Industry**: Cybersecurity – Data Loss Prevention (DLP) & Insider Risk Management
- **Target Customers**: B2B, mid-market to enterprise (50-person startups to Fortune 500 companies)
- **Mission**: “Data protection has to work intelligently and invisibly, or it won’t work at all.” Nightfall aims to enable any company to secure sensitive data across every SaaS app, AI tool, and endpoint without disrupting workflows.

## Products & Services
- **AI-Native DLP Platform**: SaaS-based platform using 100+ AI models, LLM-based file classifiers, and computer vision to classify content with 95% accuracy. Includes data lineage tracking that traces information from source to destination.
- **API-Based SaaS Integrations**: Deploys in minutes across Microsoft 365, Google Workspace, Slack, Salesforce, Atlassian, Zendesk, Notion, and more.
- **Endpoint Agents**: Lightweight agents for macOS and Windows (deployed via MDM) that monitor data movement and enforce policies.
- **Browser Plugins**: Real-time protection for AI apps (ChatGPT, Copilot, Gemini, DeepSeek, Claude, Perplexity, etc.) – blocks sensitive data from being pasted or uploaded.
- **Shadow AI Security**: Purpose-built to prevent data leaks to generative AI tools, including both prompts and file uploads.
- **Automated Remediation**: Context-aware actions such as blocking, redacting, revoking access, quarantining, or encrypting data. 80% of incidents resolved via automation or self-remediation.

## Market Standing
- **Total Funding**: $60.3M (as of CB Insights)
- **Latest Round**: $40M Series B (raised ~4 years ago)
- **Notable Investors**: Venrock, Bain Capital Ventures. Also backed by a “cadre of CEOs, investors, professional athletes, and experts across infosec, AI, and enterprise software.”
- **Key Metrics**:
  - Detection precision: 95% (vs legacy DLP at 5-25%)
  - Typical time to first discovery of violations: 24 hours
  - Full deployment coverage in under one month
  - Average 6x ROI within first 90 days
  - POC timeline: 2 weeks
- **Growth Signals**: Strong emphasis on securing AI tool usage (Shadow AI), expanding endpoint coverage, and replacing legacy DLP tools. Leadership team has experience scaling companies to $100M+ ARR (e.g., Cyberhaven, Abnormal Security).

## Competitive Advantages
- **AI-Native Accuracy**: 95% out-of-the-box precision eliminates weeks of tuning and reduces false positives.
- **Data Lineage**: Tracks data as it moves, transforms, or is copied – catches exfiltration that regex-based tools miss.
- **Rapid Deployment**: API-based integrations in hours; no network architecture changes; zero productivity disruption.
- **Continuous Learning**: Models improve automatically, reducing false positives over time.
- **Vendor Consolidation**: Replaces multiple legacy tools (regex DLP, CASB, endpoint DLP, etc.) with a single platform.

## Strategic Focus
- **Securing AI Adoption**: Blocking data leaks to generative AI tools (ChatGPT, Copilot, etc.) while enabling safe innovation.
- **Expanding MCP Visibility**: Monitoring data movement across AI agents, MCP servers, and new attack surfaces.
- **Reducing Operational Overhead**: Using automation and employee self-remediation (80% of incidents) to lighten security team workload.
- **Platform Unification**: Positioning as a “Data Detection & Response” platform to replace legacy vendor sprawl.

## Why Work Here
- **Culture & Mission**: “Intelligent and invisible” data protection; team of ML engineers, security practitioners, and product builders from Uber, Harness, Microsoft, Code42, Rubrik, etc.
- **Compensation & Benefits**: Competitive pay, equity, 401k plan; regular compensation reviews; support for professional development.
- **Flexibility**: Flexible time off, company-wide holidays, flexible commuter options, generous parental leave. Remote/hybrid options available (home office reimbursement included).
- **Wellness**: Comprehensive health, vision, dental; reimbursement for home office, fitness, and mental wellness expenses.
- **Team**: Leadership with experience scaling from startup to $100M+ ARR; collaborative environment focused on engineering excellence and customer impact.
- **Open Roles**: Positions listed on [jobs.ashbyhq.com/nightfall-ai](https://jobs.ashbyhq.com/nightfall-ai) – new openings added frequently.

## Sources
1. [Nightfall AI – Homepage](https://www.nightfall.ai/)
2. [Nightfall AI – About Page](https://www.nightfall.ai/about)
3. [Nightfall AI – Careers Page](https://www.nightfall.ai/careers)
4. [CB Insights – Nightfall AI Profile](https://www.cbinsights.com/company/nightfall-ai)
5. [Nightfall AI Job Board (Ashby)](https://jobs.ashbyhq.com/nightfall-ai)

## Other roles at Nightfall AI

- [VP of Engineering](https://feeny.ai/job/vp-of-engineering-nightfall-ai-san-francisco-6aas59x132sb) — San Francisco, CA
- [Sales Development Representative](https://feeny.ai/job/sales-development-representative-nightfall-ai-united-states-kk9kkctset1k) — United States
- [Director, Revenue Operations & GTM Engineer](https://feeny.ai/job/director-revenue-operations-gtm-engineer-nightfall-ai-united-states-s1bz9qwf30rh) — United States
- [Senior Backend Engineer, AI/Agent Platform](https://feeny.ai/job/senior-backend-engineer-ai-agent-platform-nightfall-ai-bengaluru-1z0py0k2pesp) — Bengaluru, India
- [Talent and People Lead, India](https://feeny.ai/job/talent-and-people-lead-india-nightfall-ai-bengaluru-1krphb5807f4) — Bengaluru, India
- [Staff Backend Engineer, AI Platform](https://feeny.ai/job/staff-backend-engineer-ai-platform-nightfall-ai-bengaluru-t8cfepefkdpj) — Bengaluru, India
- [ML Engineer/Scientist, AI Platform](https://feeny.ai/job/ml-engineer-scientist-ai-platform-nightfall-ai-bengaluru-me2ddjeqkwv6) — Bengaluru, India
- [VP of Marketing](https://feeny.ai/job/vp-of-marketing-nightfall-ai-united-states-443wcbxecq3r) — United States
- [VP of Finance](https://feeny.ai/job/vp-of-finance-nightfall-ai-palo-alto-7cf9zn56tpex) — Palo Alto, CA
- [Lead Sales Engineer](https://feeny.ai/job/lead-sales-engineer-nightfall-ai-palo-alto-8b9n7qh3150q) — Palo Alto, CA