Security Researcher

Were seeking a Security Researcher with deep expertise in low-level Linux internals and eBPF-based detection development.

Your mission: analyze Linux malware and extract behavioral detections that expose attacker activity even in the most ephemeral cloud-native systems.

Team Nautilus, the threat research group, leads cutting-edge investigations into cloud-native threats from exposing stealthy, fileless malware like HeadCrab to building kernel-level defenses for containerized environments. Our work shapes open-source tools, influences cloud provider security, and protects workloads across the Fortune 500.

Core Responsibilities

Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems (Kubernetes, containers, serverless).

Build low-level behavioral detections using eBPF, focused on malware execution, privilege abuse, persistence, and evasion techniques.

Prototype observability and response capabilities at the kernel layer, contributing directly to tools like Tracee.

Analyze Linux malware and extract behavioral detections to inform threat detection logic and strengthen defensive capabilities.

Collaborate with engineering teams to translate research into production-grade detection pipelines and runtime protections.

Specialized Focus Areas:

Design and develop eBPF-based sensors that trace syscall activity, privilege escalation paths, network tampering, and stealthy behaviors.

Track emerging malware families targeting cloud-native infrastructure and extract TTPs from live samples and honeypot environments.

Contribute original research to the community through technical blogs, CVEs, conference presentations, or open-source code contributions.