Tetragon Threat Detection Engineer - Isovalent

Cisco; Brussel; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Cisco is seeking a Threat Detection Engineer to help shape runtime security policies for the Cilium Tetragon project. You’ll apply threat intelligence and vulnerability research to improve detection across Linux and cloud-native environments, with close collaboration with Isovalent and Cisco engineers.

You will design and publish policies, interact with customers and solution architects, and share insights through talks and content.

Qualifications

• 3+ years of threat and/or vulnerability research.
• 3+ years of developing security detections at scale.
• 3+ years of experience working on Linux system security (e.g., capabilities, LSMs).
• Good communication skills, both written and verbal.

Responsabilités

• Develop and maintain Tetragon runtime security policies to ensure customers have visibility of suspicious activity and protection against threats.
• Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture.
• Monitor CVEs and threat intelligence to develop Tetragon runtime security policies.
• Work with Isovalent and Cisco engineers to improve and enhance the capabilities of Tetragon security policies.
• Interact with solution architects and customers to support and deploy Tetragon security policies in production.
• Publish content and give talks based on your work.

Connaissances

Threat research

Security detections

Linux security

Communication skills

Description du poste

About This Role

Cilium Tetragon is a flexible, Kubernetes‑aware security tool, with real‑time observability and enforcement. Leveraging eBPF, Tetragon offers a low‑overhead in‑kernel solution that enhances security posture by monitoring system behaviours such as process executions, system‑call activities, and both network and file access events. As a Threat Detection Engineer, you will create and maintain runtime security policies based on threat intelligence, vulnerability disclosures, and research. These policies act as mitigation for known vulnerabilities or monitoring for unknown issues.

What You’ll Do

• Develop and maintain Tetragon runtime security policies to ensure customers have good visibility of suspicious activity on their infrastructure and are protected against the latest emerging threats.
• Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture.
• Monitor vulnerability disclosures (CVEs) and the latest threat intelligence to develop Tetragon runtime security policies.
• Work with software engineers at Isovalent and Cisco to improve and enhance the capabilities of Tetragon security policies.
• Interact with solution architects and customers as necessary to support and deploy Tetragon security policies in production.
• Publish content and give talks based on your work.

Minimum Qualifications

• 3+ years of experience in threat and/or vulnerability research.
• 3+ years of experience in developing security detections at scale, for use in a wide range of environments.
• 3+ years of experience working on Linux system security (e.g., capabilities, LSMs, etc.).
• Good communication skills, both written and verbal.

Preferred Qualifications

• Experience with eBPF and its applications in security.
• Experience with the cloud‑native ecosystem (containers, Kubernetes, etc.) and their Linux implementation (e.g., Linux cgroups, namespaces).

Why Cisco?

At Cisco we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you.