Senior Linux Security Developer — Kernel & OS Security

Описание

The Cybersecurity Research Lab at Toga Networks, Huawei's Tel Aviv R&D Center, builds product-driven technologies for next-generation endpoint, Linux, and AI security.

Responsibilities

• Design and implement high-performance Linux security components in kernel and user space (kernel modules, eBPF, system services, security agents), including tamper-resistant mechanisms for adversarial environments
• Build scalable Linux endpoint capabilities for telemetry, detection, prevention, and policy enforcement
• Investigate Linux kernel subsystems to find opportunities for new detection and prevention capabilities, including protection of AI-agent workloads (autonomous processes, tool execution, privilege usage, filesystem/network activity)
• Translate research ideas into efficient, production-grade implementations (performance, concurrency, reliability, security), and mentor engineers in systems programming and Linux security

Requirements

• 6+ years of professional development with significant hands-on C and/or C++
• 3+ years of Linux kernel development or low-level Linux systems development, with hands-on experience in eBPF/BPF, LSM, kernel tracing/instrumentation, or security frameworks
• Deep understanding of Linux internals: processes, memory management, scheduling, syscalls, filesystems, networking, kernel/user-space interaction, namespaces, containers
• Strong debugging and performance analysis skills (gdb, perf, strace, ftrace)
• Strong concurrency, synchronization, memory management, and performance optimization, building software that runs reliably under high load and adversarial conditions
• 3+ years in endpoint/host security, malware or vulnerability research, or runtime security
• Ability to independently investigate unfamiliar areas and turn findings into working prototypes
• Strong English communication skills
• Comfortable reading kernel and security source code, analyzing attacker techniques, and validating defenses against performance, coverage, and evasion
• Experience with AI coding assistants and agentic tools is an advantage; ability to critically validate AI-generated code, especially in security-sensitive, low-level software

Nice to have

• EDR/XDR agents or endpoint telemetry systems
• Linux exploitation, malware, rootkits, persistence, or evasion techniques
• Linux security mechanisms: SELinux, AppArmor, seccomp, capabilities, cgroups, Landlock
• Container and cloud workload security; exploitation mitigations or runtime security controls
• Reverse engineering, vulnerability research
• Contributions to the Linux kernel, eBPF, or open-source security ecosystem; M.Sc./Ph.D., published research, patents, or talks

We offer

• Hard problems by design, at the kernel/OS level
• Research with a path to real products deployed worldwide
• AI + OS security: help define how autonomous AI agents are monitored, constrained, and protected at the OS level
• Technical ownership and growth alongside experienced security researchers
• Competitive compensation
• Flexible hybrid work