Linux Kernel Rust eBPF Engineer

***We are unable to sponsor for this permanent full-time role***

***Position is bonus eligible***

Prestigious Enterprise Security Services Company is currently seeking a Linux Kernel eBPF Engineer with Rust experience. Candidate will contribute to the development of Linux agent that serves as the main endpoint communications hub and analysis engine that is used for customers to protect from the threat of ransomware. This role will include a focus on eBPF-based driver development for new capabilities. In addition to general Rust Agent work you will be working on kernel-level components that enable real-time threat detection and response at the system level.

Responsibilities

Develop High-Performance System Code: Write high-performance code in Rust and C for eBPF probes, user-space components, and kernel interactions

Design Agent Functionality: Handle core agent operations including data processing pipelines, inter-component communication, and system integration for the Linux endpoint agent

eBPF and Kernel Development: Design and develop eBPF programs and/or kernel-level drivers for behavioral monitoring and security event detection

Performance Optimization: Optimize eBPF program performance and ensure compatibility across different Linux kernel versions

Cross-Platform Contributions: Work with multi-platform logic in Rust while ensuring compatibility and optimal performance across different operating systems and architectures

Debugging & Optimization: Use logs, debuggers, and profiling tools to analyze performance, diagnose issues, and ensure correct behavior

Test & Maintain Code Quality: Write unit and integration tests for your code, adhering to consistent coding style guidelines and overall product architecture

Team Collaboration: Communicate effectively with other developers and teams to ensure the component integrates well within the overall product architecture and maintains interoperability across platforms

Qualifications:

Ability to develop high-quality production code in Rust

Strong experience with eBPF development including writing eBPF programs, user-space loaders, and event processing pipelines

Deep understanding of Linux kernel internals, system calls, and kernel data structures

Experience with eBPF toolchains and libraries (libbpf, BPF CO-RE, bpftool, or similar)

Proficiency debugging kernel-level code and eBPF programs using tools like bpftrace, perf, or similar

Knowledge and experience with the following Rust crates: threading, async, tokio

Experience with Linux driver development or kernel module programming

Bonus Skills and Qualifications

Familiarity with Linux Security Modules (LSM)

Familiarity with SQL

Experience with endpoint security or threat monitoring systems

Knowledge of additional languages (C++, Python)

Understanding of process monitoring, network traffic analysis, or file system monitoring using eBPF