Principal Engineer – CPU Hardware Telemetry & Silicon Security

Cyble, Singapore, SG +3

The role

We are seeking a Principal Engineer specializing in CPU Hardware Telemetry and Low-Level Systems Engineering to design, develop, and optimize telemetry collection capabilities across modern Intel and AMD processors.

You will work at the intersection of CPU microarchitecture, operating systems, security engineering, and machine learning.

Your primary responsibility will be to develop production-grade technologies that reliably extract, normalize, and analyze hardware-level execution signals for real-time threat detection.

All jobs

Principal Engineer – CPU Hardware Telemetry & Silicon Security

Cyble, Singapore, SG +3

The role

You will work at the intersection of CPU microarchitecture, operating systems, security engineering, and machine learning.

Your primary responsibility will be to develop production-grade technologies that reliably extract, normalize, and analyze hardware-level execution signals for real-time threat detection.

What you will do

CPU Hardware Telemetry Engineering
Design and implement high-performance telemetry collection using CPU Performance Monitoring Units (PMUs).
Work with hardware performance counters (HPCs), architectural and model-specific events, and low-level processor instrumentation.
Develop collection capabilities leveraging:
Intel Performance Monitoring Counters (PMCs)
Intel Precise Event-Based Sampling (PEBS)
Intel Processor Trace (Intel PT)
Intel Last Branch Records (LBR)
AMD Instruction-Based Sampling (IBS)
AMD Performance Monitoring Counters
Model-Specific Registers (MSRs)
Identify and characterize hardware events relevant to malware execution, ransomware, privilege escalation, exploitation, and other suspicious behaviors.
Implement adaptive sampling, counter multiplexing, and efficient collection across CPU generations.
Kernel-Level and Systems Engineering
Develop low-level telemetry collectors for Windows and Linux operating systems.
Implement kernel-mode components, drivers, and privileged user-space services where appropriate.
Work with Linux perf_events, eBPF, Windows kernel interfaces, and native operating-system profiling capabilities.
Optimize sampling frequency, latency, CPU utilization, memory consumption, and system stability.
Ensure telemetry collection operates safely in production without materially affecting endpoint performance.
Design robust handling for processor-specific differences, unsupported events, permissions, and firmware configurations.
Hardware-Assisted Threat Detection
Collaborate with security researchers and machine learning engineers to transform raw hardware telemetry into actionable behavioral signals.
Investigate how CPU execution patterns, branch behavior, cache activity, instruction retirement, and memory-access characteristics can help distinguish benign activity from malicious execution.
Develop reliable feature-extraction pipelines suitable for real-time detection models.
Evaluate signal robustness against workload changes, environmental noise, and adversarial evasion.
Help establish measurable detection accuracy, false-positive rates, and performance benchmarks.
CPU Architecture and Virtualization
Build a deep understanding of AMD and Intel processor microarchitectures and their hardware event models.
Evaluate telemetry fidelity across processor generations and operating environments.
Investigate differences between bare-metal and virtualized environments, including counter availability, sampling behavior, and measurement distortion.
Develop methods for validating and calibrating hardware telemetry across different hardware configurations.
Work with engineering and ecosystem partners on hardware compatibility, performance optimization, and deployment readiness.
Production Engineering
Build scalable, fault-tolerant telemetry collection components suitable for deployment across enterprise endpoints.
Develop benchmarking, validation, profiling, and diagnostic tools.
Maintain comprehensive testing across different CPUs, operating systems, and workload profiles.
Collaborate with Cyble Titan engineering teams to integrate hardware telemetry into endpoint detection and response workflows.
Contribute to technical architecture, design reviews, engineering standards, and intellectual property development.

Principal Engineer – CPU Hardware Telemetry & Silicon Security

The role

Principal Engineer – CPU Hardware Telemetry & Silicon Security

The role

What you will do

What you need

Nice to have

Within your first 3-9 months, you will have

About Cyble

Similar jobs at other companies

Endpoint Engineer

Senior CPU Silicon Analysis Engineer

Kernel Engineer

Principal Competitive CPU Microarchitecture & Platform Performance Engineer

Systems Debug Engineer- EE

Security Hardware Integration Engineer

Cyble

Compared with similar jobs