Senior Linux Kernel Engineer – Runtime Security

Aqua Security is a global leader in cloud-native security, protecting modern applications and workloads across containers, Kubernetes, serverless, and cloud environments.

We are looking for an experienced Senior Linux Kernel Engineer to join our Runtime Security Group and help build the technology that protects workloads at runtime — where sophisticated attacks need to be detected and stopped.

This is a highly technical, hands-on role at the intersection of Linux kernel development, cybersecurity, cloud-native technologies, and runtime protection.

You’ll work on complex, low-level challenges that directly impact Aqua’s runtime security platform, designing and building scalable components for both cloud and on-prem environments.

If you're passionate about Linux internals, kernel development, eBPF, and solving deep technical security challenges, this is an opportunity to work on technology that operates at the heart of modern cloud security.

What You Will Own

• Design and implement robust, scalable runtime security components for cloud and on-prem environments
• Work deeply with Linux kernel internals, kernel modules, syscalls, and kernel/user-space interaction
• Develop and optimize low-level components that enable runtime threat detection and protection
• Leverage technologies such as eBPF for tracing, observability, security monitoring, and runtime protection
• Take end-to-end ownership of complex technical initiatives — from architecture and design through implementation, testing, code review, and production delivery
• Collaborate closely with software architects and senior engineers to shape technical direction and solve complex system-level challenges
• Lead and contribute to technical PoCs evaluating new technologies and approaches
• Work across the full software development lifecycle, maintaining high standards for code quality, performance, reliability, and security
• Contribute to the evolution of Aqua’s next-generation cloud-native runtime security platform

What We're Looking For:

• 10+ years of software development experience with strong expertise in C/C++ or Go on Linux
• 6+ years of hands-on Linux OS-level programming
• 6+ years of Linux kernel development experience, including kernel modules, syscall interfaces, and kernel/user-space interaction
• Deep understanding of Linux internals and low-level programming
• Hands-on experience with eBPF, particularly in tracing, security monitoring, networking, or observability use cases
• Strong understanding of operating systems, processes, memory, networking, and system-level performance
• Proven ability to design and implement high-performance, reliable system components
• Strong problem-solving skills and a hands-on approach to complex technical challenges
• Excellent communication and documentation skills
• Collaborative mindset with a strong sense of ownership and initiative

Nice to Have

• Experience working on cybersecurity products, particularly runtime, endpoint, or workload protection
• Experience with containers, Kubernetes, and cloud-native environments
• Experience working with Linux security mechanisms
• Experience in Agile R&D environments
• Background in developing security, observability, or infrastructure technologies

Why Aqua Security?

At Aqua, you'll work at the forefront of cloud-native and runtime security, solving some of the hardest technical challenges in cybersecurity.

You'll have the opportunity to:

• Work on deep Linux kernel and runtime technologies
• Build security capabilities protecting large-scale production environments
• Work alongside world-class engineers, security researchers, and architects
• Influence the technical direction of a leading cloud-native security platform
• Take real ownership of challenging projects from concept to production
• Work with technologies including Linux, eBPF, Kubernetes, containers, and cloud infrastructure

This is not a role for someone looking to simply build another backend service.

It's an opportunity to work deep in the operating system, understand how modern attacks operate, and build the technology that stops them.

If Linux Kernel, eBPF, runtime security, and cloud-native technologies are your world — we'd love to talk.