Linux Agent Engineer

What we do:
Halcyon is the industry’s first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware.

Who we are:
Halcyon was formed in 2021 by a team of cyber industry veterans after battling the scourge of ransomware (and advanced threats) for years at some of the largest global security vendors. Comprised of leaders from Cylance (now Blackberry), Accuvant (now Optiv), Fireye and ISS X-Force (now IBM), Halcyon is focused on building products and solutions for mid-market and enterprise customers.

As a remote-native, completely distributed global team, we recognize great talent can exist anywhere. We invite you to apply to a job you’re interested in and we'll work a plan to meet your needs.

The Role

Halcyon's goal is to deliver an anti-ransomware solution that breaks new ground as to what a security product can deliver. Aligned with this goal, Halcyon is looking for an experienced engineer to contribute to the development of our Linux agent. Our agent is the main endpoint communications hub and analysis engine that is used to help ensure our customers are protected from the threat of ransomware. If you're passionate about security and want to make a real difference, we'd love to hear from you.

This role will include a focus on eBPF-based driver development for new capabilities. In addition to general Rust Agent work you will be working on kernel-level components that enable real-time threat detection and response at the system level.

Responsibilities

• Develop High-Performance System Code: Write high-performance code in Rust and C for eBPF probes, user-space components, and kernel interactions
• Design Agent Functionality: Handle core agent operations including data processing pipelines, inter-component communication, and system integration for the Linux endpoint agent
• eBPF and Kernel Development: Design and develop eBPF programs and/or kernel-level drivers for behavioral monitoring and security event detection
• Performance Optimization: Optimize eBPF program performance and ensure compatibility across different Linux kernel versions
• Cross-Platform Contributions: Work with multi-platform logic in Rust while ensuring compatibility and optimal performance across different operating systems and architectures
• Debugging & Optimization: Use logs, debuggers, and profiling tools to analyze performance, diagnose issues, and ensure correct behavior
• Test & Maintain Code Quality: Write unit and integration tests for your code, adhering to consistent coding style guidelines and overall product architecture
• Team Collaboration: Communicate effectively with other developers and teams to ensure the component integrates well within the overall product architecture and maintains interoperability across platforms

Skills and Qualifications

• Ability to develop high-quality production code in Rust
• Strong experience with eBPF development including writing eBPF programs, user-space loaders, and event processing pipelines
• Deep understanding of Linux kernel internals, system calls, and kernel data structures
• Experience with eBPF toolchains and libraries (libbpf, BPF CO-RE, bpftool, or similar)
• Proficiency debugging kernel-level code and eBPF programs using tools like bpftrace, perf, or similar
• Knowledge and experience with the following Rust crates: threading, async, tokio
• Experience with Linux driver development or kernel module programming

Bonus Skills and Qualifications

• Familiarity with Linux Security Modules (LSM)
• Familiarity with SQL
• Experience with endpoint security or threat monitoring systems
• Knowledge of additional languages (C++, Python)
• Understanding of process monitoring, network traffic analysis, or file system monitoring using eBPF

Benefits: 

Halcyon offers the following benefits to eligible employees:

• Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.
• 401k plan with 3% employer match
• Short and long-term disability coverage, basic life and AD&D insurance plans.
• Medical and dependent care FSA options.
• Flexible PTO policy
• Parental leave
• Generous equity offering

The Company reserves the right to modify or change these benefits programs at any time, with or without notice. 

#LN-DNI

Base Salary Range: $150k-$200k, 10% bonus, and equity.

In accordance with applicable state and federal laws, the range provided is Halcyon’s reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. Base pay is one part of the total package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and equity in the Company.

We understand it takes a diverse team of highly intelligent, passionate, curious, and creative people to develop the exceptional product we are building. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity employer.