Staff Software Development Engineer – Linux Endpoint
BeyondTrust
—
Jul 20, 2026
—
Jul 22, 2026
What this job asks for AI summary
A staff-level Linux kernel engineering role focused on building and owning the eBPF-based runtime enforcement layer of an identity security platform. The work centers on writing BPF LSM hooks and userspace agents that make real-time allow/deny decisions on Linux endpoints, extending enforcement into containers and Kubernetes, and maintaining portability across kernel versions. Suits a deep Linux systems programmer with strong eBPF and kernel internals experience who is comfortable taking end-to-end technical ownership.
Staff level · 8+ years · Remote · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $138,970 (middle half $107,524–$175,762).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (5)
No work location or CBSA is specified in the posting; the role appears to be remote-eligible based on BeyondTrust's typical distributed workforce, but the JD does not explicitly state remote — treat location as unspecified.
No compensation figures are provided.
The eBPF stack requirement names libbpf, BCC, Cilium eBPF, and aya as interchangeable options ('any eBPF stack transfers'), but verifier fluency and aya/aya-ebpf are the primary stack in use; alternatives are captured accordingly.
Claude Code is listed as a preferred daily-workflow tool ('you use Claude Code or a comparable tool') under the requirements section but is framed as a concrete named tool with 'comparable' alternatives acceptable — listed as preferred given the 'or comparable' qualifier.
The role explicitly carries cross-team technical direction (Linux enforcement authority, cross-org architecture reviews, mentoring senior/mid engineers) consistent with a Staff-level individual contributor, not a people-management role.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.