Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
As a Staff Software Development Engineer, you will be the Linux kernel authority for the runtime enforcement layer of our Identity Security Platform. You will set and own the technical direction for eBPF enforcement on Linux, ensuring components permit or deny actions in-kernel in real time across the fleet without breaking legitimate workloads.
Responsibilities
- Design, build, and own eBPF programs and BPF LSM hooks (bprm_check_security, file_open, socket_connect).
- Enforce policy synchronously in the kernel by returning -EPERM to block, rather than logging after the fact.
- Build the userspace agent that loads and drives eBPF programs.
- Own the kernel/userspace enforcement boundary, including kernel-side event capture, policy evaluation in userspace, and deny decisions pushed back into the kernel.
- Drive down enforce-mode latency on the syscall hot path as we scale across large fleets.
- Extend enforcement into containers and namespaces, including cgroup- and namespace-aware policy and container identity on kernel events.
- Harden portability across kernel versions and distributions.
- Partner with macOS and Windows enforcement engineers and the policy-backend team on shared components.
- Represent Linux in cross-org architecture reviews.
- Read requirements to find gaps and risks, propose simplifications, and explain tradeoffs.
- Raise the engineering bar by taking end-to-end ownership from design through production.
- Mentor senior and mid-level engineers on Linux systems and eBPF craft.
Requirements
- Deep Linux kernel internals (scheduling, memory management, networking stack, syscalls, LSM framework).
- Production systems programming in C, Rust, or both.
- Hands-on eBPF for security enforcement, with comfort at the verifier level.
- Ability to write eBPF programs that pass BPF_PROG_LOAD across kernel versions.
- Fluency with the eBPF verifier is non-negotiable.
- Experience with BTF and CO-RE, and practical realities of portability.
- Understanding of container runtime internals (namespaces, cgroups, seccomp) and their intersection with kernel-level security tooling.
- Experience with kernel debugging and performance tooling (perf, ftrace, bpftrace, gdb/kgdb, crash-dump analysis).
- 8+ years in systems-level software engineering with depth in Linux kernel development and eBPF.
- Demonstrated AI-first development experience, using AI tools like Claude Code in daily workflows.
- A working grasp of systems design patterns and their tradeoffs at the kernel/userspace boundary.
- Full-lifecycle experience, including product release, in an agile environment.
- A track record of technical leadership on complex, ambiguous initiatives that span teams.
Skills
- Linux kernel internals
- eBPF
- C
- Rust
- BPF LSM hooks
- Ring buffers
- Hash-keyed caches
- Syscalls
- Containers
- Namespaces
- Kubernetes
- BTF
- CO-RE
- LSM
- Kernel debugging
- Performance tooling
- AI-driven development
- Systems design patterns
- Agile methodologies
Location
- Remote
Work Type
- Full-time
Experience Level
- Staff
- 8+ years
About the Company
- BeyondTrust is the global identity security leader protecting Paths to Privilege™.
- Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats.
- BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies.
- We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.
- Learn more at www.beyondtrust.com.
Equal Opportunity
- Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.
- We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.