Security Software Engineer - Container Network Security REF417R

We are looking for a security programmer to help us build the next generation AI container network security system.This role sits at the intersection of systems programming, network security, and cloud-native infrastructure.What You'll DoHelp design and implement traffic inspection and prevention components that run in-line within Kubernetes clusters (as a DaemonSet, sidecar, or CNI-integrated component)Build or contribute to protocol parsers and signature/rule-matching enginesContribute to an AI-assisted signature generation pipelineWork with the Linux networking stack to intercept and act on traffic with acceptable latency overheadHelp ensure the data path is efficient enough to run under the resource budgets typical of Kubernetes workloadsCollaborate with detection research and cloud security teams to translate threat intelligence into enforceable rules and behaviors.Requirements: Professional experience in Rust or C/C++ (comfort with both, or willingness to pick up the second, is a plus - not a hard requirement)Security background - experience with developing security products - such as IPS, firewall, researcher, API security, etcGeneral familiarity with Kubernetes and at least one public cloud (AWS, Azure, or GCP) - production experience is preferred, but strong infrastructure/networking experience elsewhere is also welcomeComfort working on systems/infrastructure-level software rather than purely application-level codeHands on AI SDLC experienceCuriousTech savvyGood communication skillsIndependentAdvantageExperience with DPI engines, protocol parsers, or signature-matching systems (e.g., Snort/Suricata-style rules)Exposure to ML/AI approaches for anomaly detection, classification, or rule generationLinux kernel/networking internals: netfilter/nftables, eBPF/XDP, TCP/IP, TLSKubernetes networking specifics: CNI, NetworkPolicy, service mesh data planes (Envoy/Istio)Container runtime/isolation experience: containerd/CRI-O, namespaces/cgroupsLow-latency/high-throughput systems experience (zero-copy design, lock-free structures)Familiarity with attacker techniques and IPS/IDS evasionComfort with ambiguous, greenfield technical work.This position is open to all candidates.