Yaniv Agman
Tracee Team Lead at Aqua Security
Israel
Summary
🤩
Rockstar🎓
Top SchoolYaniv Agman is a security engineer and team lead with 11 years of experience building Linux-focused runtime security and forensics solutions using eBPF. As creator and maintainer of Tracee and a major contributor to libbpfgo and BPFroid, he blends deep kernel- and user-space expertise to deliver practical tooling for containers, Android, and network capture. At Aqua Security he progressed from kernel-aware engineering to leading the Tracee team, inventing features like a dynamic memory unpacker and process-aware packet capture that enable fileless-execution detection. Based in Israel with an MS in Cyber Space Security, he pairs low-level Linux internals experience (from kernel and embedded work at SanDisk and Marvell) with a strong open-source track record that improves observability and threat detection across cloud-native environments.
11 years of coding experience
6 years of employment as a software developer
Bachelor of Science (BSc), Electrical and Computer Engineering, Bachelor of Science (BSc), Electrical and Computer Engineering at Ben Gurion UniversityBachelor of Science (BSc), Computer Science, Bachelor of Science (BSc), Computer Science at Ben-Gurion University of the Negev
Github Skills (20)
ebpf10
it-security10
linux10
linux-kernel10
bpf10
security10
system-calls10
go10
apidoc9
c119
containerization9
tca9
tcc9
tcm9
api9
Programming languages (7)
Github contributions (5)
aquasecurity/tracee
Sep 2019 - Jan 2023
Linux Runtime Security and Forensics using eBPF
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:2 releases, 2247 reviews, 391 commits in 3 years 4 months
Contributions summary:Yaniv's commits focused on implementing and enhancing container tracing features using eBPF. They implemented the tracing of new syscalls such as prctl, ptrace, and symlink, and expanded the syscall enum to support a wider range of kernel functionalities. The user also implemented network capture from multiple interfaces and added support for filtering by container and command name.
bpfgolangsecurity-toolssecurityruntime
aquasecurity/libbpfgo
Nov 2020 - Jul 2021
eBPF library for Go. Powered by libbpf.
Role in this project:Back-end Developer
Back-end DeveloperContributions:95 reviews, 8 commits, 7 PRs in 8 months
Contributions summary:Yaniv primarily contributed to the development of the `libbpfgo` library. Their work included adding necessary header files for compilation, fixing existing tests, and implementing features like filtering based on various namespaces and communication parameters. The user also introduced traffic control (TC) APIs and addressed memory leaks, indicating a focus on functionality and stability. These contributions suggest the user played a key role in expanding the library's capabilities.
bpfgolangebpflinuxlibbpf
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.