Staff Software Development Engineer – Linux Endpoint
BeyondTrustabout 4 hours ago
Responsibilities
- Design, build, and own eBPF programs and BPF LSM hooks for real-time policy enforcement.
- Manage the kernel/userspace enforcement boundary, including event capture and policy evaluation.
- Reduce enforce-mode latency on syscall hot paths across large fleets.
- Extend enforcement capabilities into containers and namespaces.
- Ensure portability across kernel versions and distributions.
- Collaborate with macOS and Windows enforcement engineers on shared policy and architecture.
- Identify gaps and risks in requirements and propose simplifications.
- Mentor senior and mid-level engineers on Linux systems and eBPF.
Requirements
- Deep understanding of Linux kernel internals, including scheduling and memory management.
- Hands-on experience with eBPF for security enforcement and proficiency at the verifier level.
- Knowledge of BTF and CO-RE for portability across kernel versions.
- Familiarity with container runtime internals and kernel-level security tooling.
- 8+ years of experience in systems-level software engineering with a focus on Linux kernel development.
- Experience with AI-driven development tools and practices.
- Understanding of systems design patterns at the kernel/userspace boundary.
- Proven track record of technical leadership on complex initiatives.