We are looking for an experienced Senior Linux Kernel Engineer to join our Runtime Security Group and help build the technology that protects workloads at runtime — where sophisticated attacks need to be detected and stopped.
This is a highly technical, hands-on role at the intersection of Linux kernel development, cybersecurity, cloud-native technologies, and runtime protection.
You’ll work on complex, low-level challenges that directly impact Aqua’s runtime security platform, designing and building scalable components for both cloud and on-prem environments.
If you're passionate about Linux internals, kernel development, eBPF, and solving deep technical security challenges, this is an opportunity to work on technology that operates at the heart of modern cloud security.
What You Will Own
Design and implement robust, scalable runtime security components for cloud and on-prem environments
Work deeply with Linux kernel internals, kernel modules, syscalls, and kernel/user-space interaction
Develop and optimize low-level components that enable runtime threat detection and protection
Leverage technologies such as eBPF for tracing, observability, security monitoring, and runtime protection
Take end-to-end ownership of complex technical initiatives — from architecture and design through implementation, testing, code review, and production delivery
Collaborate closely with software architects and senior engineers to shape technical direction and solve complex system-level challenges
Lead and contribute to technical PoCs evaluating new technologies and approaches
Work across the full software development lifecycle, maintaining high standards for code quality, performance, reliability, and security
Contribute to the evolution of Aqua’s next-generation cloud-native runtime security platform
Why Aqua Security?
At Aqua, you'll work at the forefront of cloud-native and runtime security, solving some of the hardest technical challenges in cybersecurity.
You'll have the opportunity to:
Work on deep Linux kernel and runtime technologies
Build security capabilities protecting large-scale production environments
Work alongside world-class engineers, security researchers, and architects
Influence the technical direction of a leading cloud-native security platform
Take real ownership of challenging projects from concept to production
Work with technologies including Linux, eBPF, Kubernetes, containers, and cloud infrastructure
This is not a role for someone looking to simply build another backend service.
It's an opportunity to work deep in the operating system, understand how modern attacks operate, and build the technology that stops them.
If Linux Kernel, eBPF, runtime security, and cloud-native technologies are your world — we'd love to talk.
About the Team
Requirements
10+ years of software development experience with strong expertise in C/C++ or Go on Linux
6+ years of hands-on Linux OS-level programming
6+ years of Linux kernel development experience, including kernel modules, syscall interfaces, and kernel/user-space interaction
Deep understanding of Linux internals and low-level programming
Hands-on experience with eBPF, particularly in tracing, security monitoring, networking, or observability use cases
Strong understanding of operating systems, processes, memory, networking, and system-level performance
Proven ability to design and implement high-performance, reliable system components
Strong problem-solving skills and a hands-on approach to complex technical challenges
Excellent communication and documentation skills
Collaborative mindset with a strong sense of ownership and initiative
Nice to Have
Experience working on cybersecurity products, particularly runtime, endpoint, or workload protection
Experience with containers, Kubernetes, and cloud-native environments
Experience working with Linux security mechanisms
Experience in Agile R&D environments
Background in developing security, observability, or infrastructure technologies
