Tetragon Threat Detection Engineer - Isovalent

The role of a Tetragon Threat Detection Engineer at Isovalent involves working with Cilium Tetragon, a Kubernetes-aware security tool. This tool uses eBPF to monitor and enforce security policies in real-time, focusing on process executions, system call activities, and network and file access events. Isovalent, in partnership with Cisco, develops solutions that enhance security and visibility for organizations. The main responsibilities include developing and maintaining Tetragon runtime security policies. These policies are designed to protect against the latest emerging threats and provide visibility into suspicious activities. The engineer will also help design frameworks and architectures that make it easy for customers to consume these policies and understand their overall security posture. Monitoring vulnerability disclosures and the latest threat intelligence is crucial for creating effective policies. Collaboration with software engineers at Isovalent and Cisco is essential for improving and enhancing Tetragon's capabilities. Additionally, the engineer will interact with solution architects and customers to support and deploy these policies in production environments. Publishing content and giving talks based on the work is also part of the role. To qualify for this position, candidates must have at least three years of experience in threat and/or vulnerability research. Additionally, three years of experience in developing security detections at scale and three years of experience working on Linux system security are required. Good communication skills, both written and verbal, are also necessary. Nice-to-have skills include experience with eBPF and its applications in security, as well as familiarity with the cloud-native ecosystem, including containers, Kubernetes, and their Linux implementations. The role offers opportunities to work with a global team and contribute to innovative security solutions. What the role asks for: - 3+ years of experience in threat and/or vulnerability research - 3+ years of experience in developing security detections at scale - 3+ years of experience working on Linux system security - Good communication skills, both written and verbal - Nice-to-have: Experience with eBPF and its applications in security - Nice-to-have: Experience with the cloud-native ecosystem (containers, Kubernetes, etc.) and their Linux implementation