Company Description Lorasis provides a cryptographic reality layer for modern enterprise networks, distributed infrastructure, and AI pipelines. The company addresses fundamental flaws in traditional enterprise defense by decoupling security from production workloads, eliminating intrusive agents and high performance overhead.

Its platform delivers real-time, out-of-band runtime protection via a hypervisor-level “Network Immune System” that monitors execution states and network flows external to the workload. Complementing this is the Lorasis Provenant Engine, a cryptographically secure framework that creates deterministic state representations and signed provenance envelopes for transactions, logs, pipelines, and AI decisions. Together, these systems offer platform-agnostic verification, hardware-attested audit trails, and compliance-friendly security even after sensitive source data is removed.

Role Description This is a full-time, remote role for a Kernel Engineer focusing on eBPF, XDP, TPM, and TEE technologies. The engineer will design, implement, and optimize low-level components that operate at the Linux kernel, hypervisor, and network interface layers to power Lorasis’s out-of-band security and cryptographic verification platform.

Day-to-day responsibilities include developing eBPF/XDP-based telemetry and enforcement pipelines, integrating hardware security modules such as TPMs, and working with Trusted Execution Environments to support secure, attested runtime.



The role involves collaborating with security researchers, distributed systems engineers, and product teams to translate threat models into production-grade kernel features and observability mechanisms. The engineer will also profile and tune performance, contribute to internal tooling and documentation, and participate in code reviews to maintain robust, reliable, and secure kernel-level code.

Qualifications

- Strong kernel engineering skills, including experience with Linux kernel internals, system calls, and low-level debugging tools.
- Hands-on expertise with eBPF and XDP for building observability, telemetry, or packet processing pipelines in production environments.
- Practical experience with TPMs, TEEs (e.g., Intel SGX, AMD SEV, ARM TrustZone), and hardware-backed attestation or secure boot workflows.
- Proficiency in systems programming languages such as C and Rust, with a focus on memory safety, concurrency, and performance optimization.
- Familiarity with networking concepts (L2–L4), Linux networking stack, and high-performance packet capture or filtering frameworks.
- Experience with virtualization and cloud-native infrastructure (e.g., KVM, QEMU, containers, Kubernetes) and hypervisor-level integration.
- Background in security engineering or cryptography concepts, including threat modeling, secure code practices, and integrity verification.
- Comfort with collaborative development workflows, including Git-based version control, code review, and clear technical documentation

📌 Kernel Engineer - eBPF, XDP, TPM, TEE (Madrid)
🏢 Lorasis
📍 Madrid