Threat Detection Engineer

Cisco

. Develop and maintain Tetragon runtime security policies to provide customers visibility into suspicious infrastructure activity and protection against emerging threats .

Posted 11/5/2026full-timeZurich • SwitzerlandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining runtime security policies, with a strong focus on threat and vulnerability research, Linux system security, and cloud-native technologies. Capable of collaborating with engineers and architects to enhance security capabilities and effectively communicate findings.

Highest-signal resume keywords

Threat And Vulnerability ResearchSecurity Detections DevelopmentLinux System SecurityEBPF ExperienceCloud-Native Ecosystem Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Runtime Security PoliciesThreat Intelligence MonitoringSecurity Framework DesignLinux CapabilitiesLinux Security Modules

Soft Skills

Good Communication Skills

Tools & Technologies

EBPFContainersKubernetes

Industry Keywords

CVE MonitoringSecurity PostureInfrastructure Activity

Tech Stack

Tools & technologies

CloudKubernetesLinux

About the role

Key responsibilities & impact

Develop and maintain Tetragon runtime security policies to provide customers visibility into suspicious infrastructure activity and protection against emerging threats
Help design frameworks and architectures for consuming policies and understanding overall security posture
Monitor CVEs and threat intelligence to develop runtime security policies
Work with Isovalent and Cisco software engineers to improve Tetragon security policy capabilities
Interact with solution architects and customers to support and deploy policies in production
Publish content and give talks based on the work

Requirements

What you’ll need

3+ years of experience in threat and/or vulnerability research
3+ years of experience in developing security detections at scale, for use in a wide range of environments
3+ years of experience working on Linux system security (e.g., capabilities, LSMs, etc.)
Good communication skills, both written and verbal
Preferred: Experience with eBPF (extended Berkeley Packet Filter) and its applications in security
Preferred: Experience with the cloud-native ecosystem (containers, Kubernetes, etc.) and their Linux implementation (e.g., Linux cgroups, namespaces)