Staff Linux Kernel Security Engineer (eBPF Endpoint)

BeyondTrust; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

BeyondTrust is seeking a Staff Software Development Engineer to own the Linux kernel enforcement layer of the Identity Security Platform. You will shape eBPF enforcement, hooks, and kernel-to-userspace policy with a focus on real-time decisions and scalable performance.

You will lead kernel-space design, collaborate with macOS/Windows teams, and drive end-to-end ownership from design to production, ensuring security and correctness at scale.

Qualifications

• 8+ years in systems-level software engineering.
• Production Linux kernel experience with eBPF.
• Ability to ship kernel-space and userspace components.
• Experience with AI-assisted development is a plus.

Responsibilities

• Design, build, and own eBPF programs and BPF LSM hooks.
• Own the kernel/userspace enforcement boundary with low latency.
• Drive down enforce-mode latency on the syscall hot path.
• Extend enforcement into containers and namespaces in Kubernetes workloads.
• Collaborate across macOS and Windows enforcement teams on shared components.
• Mentor engineers on Linux systems and eBPF craft.

Skills

Linux kernel

eBPF

C programming

Rust programming

Kernel debugging

Performance tuning

AI tooling

Leadership

Tools

libbpf

aya-ebpf

BCC

GDB

perf

Job description

BeyondTrust is seeking a Staff Software Development Engineer to own the Linux kernel enforcement layer of the Identity Security Platform. You will shape eBPF enforcement, hooks, and kernel-to-userspace policy with a focus on real-time decisions and scalable performance.

You will lead kernel-space design, collaborate with macOS/Windows teams, and drive end-to-end ownership from design to production, ensuring security and correctness at scale.