Tetragon Threat Detection Engineer

About the role

Cisco is looking for a Tetragon Threat Detection Engineer to join the Isovalent team in Zurich. You will design, develop, and maintain runtime security policies for Cilium Tetragon, a low‑overhead, eBPF‑based security solution that provides real‑time observability and enforcement for Kubernetes environments.

Key responsibilities

• Develop and maintain Tetragon runtime security policies that give customers visibility into suspicious activity and protect against emerging threats.
• Monitor vulnerability disclosures (CVEs) and threat intelligence to translate findings into actionable security policies.
• Collaborate with Isovalent and Cisco software engineers to enhance Tetragon’s policy capabilities.
• Work with solution architects and customers to deploy and support policies in production environments.
• Publish technical content and present talks based on your research and policy work.

Required profile

• 3+ years of experience in threat or vulnerability research.
• 3+ years developing security detections at scale across diverse environments.
• 3+ years working on Linux system security (capabilities, LSMs, etc.).
• Strong written and verbal communication skills.

Required skills

• eBPF and its security applications.
• Linux system security mechanisms.
• Kubernetes and container ecosystems.
• Linux cgroups and namespaces.