Systems Architecture at Vercel
Edge telemetry cannot drop events. Our detection engine attaches Aya eBPF kprobes and tracepoints to track process executions, raw socket opens, and file descriptor mutations directly in the Linux kernel. A native Rust collector drains BPF ring buffers into user-space memory without allocation spikes. Speed matters. Events feed an in-memory rule engine that enforces rate limits and drops rogue traffic before it hits edge runtimes. This keeps our global fleet secure.
In this role, you protect global developer infrastructure against zero-day exploits, volumetric abuse, and lateral movement. Base salary sits between $208,000 and $312,000 USD depending on location and experience.
What You Will Own in Production
- Author and maintain in-kernel eBPF programs via Aya to extract process lifecycle and network flow telemetry.
- Write high-throughput asynchronous stream processors in Tokio to evaluate behavioral signals in sub-millisecond budgets.
- Construct automated containment primitives that isolate untrusted containers at the Linux cgroup and network namespace boundaries.
- Profile kernel memory footprints and CPU overhead across diverse kernel releases from 5.15 through 6.x.
Background We Look For
- Proficiency writing production Rust with deep understanding of Linux system calls, cgroups, namespaces, and networking primitives.
- Direct experience developing or auditing eBPF programs using Aya or libbpf.
- Familiarity with distributed telemetry ingestion, structured logging pipelines, and threat modeling for cloud runtimes.
- Compensation: $208,000 to $312,000 USD base salary, equity package, and flexible remote work flexibility.
