Runtime Sensor Developer | eBPF Expert

We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of app security from the inside out — join us.

At Miggo, we live by four core values:

We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives.

Do you dream in C and know the Linux kernel like an old friend? We need an eBPF wizard to build the secret sauce of Miggo’s platform – our ultra-lightweight, in-app sensor.

In this role, you’ll write low-level code that hooks deep into runtimes and OS internals (via eBPF) to capture runtime data with near-zero overhead. Basically, you’re creating the “eyes and ears” inside applications, so we can detect intrusions as they happen.
You’ll be pushing the envelope of what eBPF and kernel tech can do: tracing syscalls, monitoring network flows, and intercepting anything attackers might exploit. Your work will help determine exploitability and flag compromises instantly – even for zero-day attacks that nobody has seen before.

This is a high-impact, experimental role: part engineer, part hacker – optimizing for performance and reliability while you’re bending the rules of the OS. If you love digging into assembly, performance tuning, and building tools that peer into the guts of running software, come join us. You’ll have the freedom to innovate at the lowest levels of the stack (and we promise, no boring corporate kernel modules here – only the fun stuff!).