diff --git a/.gitlab/kernel_matrix_testing/security_agent.yml b/.gitlab/kernel_matrix_testing/security_agent.yml
index 63c31a640ab36..88a5628b851ee 100644
--- a/.gitlab/kernel_matrix_testing/security_agent.yml
+++ b/.gitlab/kernel_matrix_testing/security_agent.yml
@@ -101,7 +101,7 @@ upload_secagent_tests_arm64:
     ARCH: arm64
     INSTANCE_TYPE: m6gd.metal
 
-.kmt_run_secagent_tests:
+.kmt_run_secagent_tests_base:
   extends: .kmt_run_tests
   allow_failure: true
   stage: kernel_matrix_testing_security_agent
@@ -110,6 +110,10 @@ upload_secagent_tests_arm64:
   variables:
     TEST_COMPONENT: security-agent
 
+.kmt_run_secagent_tests:
+  extends: .kmt_run_secagent_tests_base
+  allow_failure: true
+
 kmt_run_secagent_tests_x64:
   extends:
     - .kmt_run_secagent_tests
@@ -151,6 +155,26 @@ kmt_run_secagent_tests_x64:
     - !reference [.collect_outcomes_kmt]
     - !reference [.upload_junit_kmt]
 
+kmt_run_secagent_tests_x64_required:
+  extends:
+    - .kmt_run_secagent_tests_base
+  image: registry.ddbuild.io/ci/datadog-agent-buildimages/system-probe_x64$DATADOG_AGENT_SYSPROBE_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_SYSPROBE_BUILDIMAGES
+  tags: ["arch:amd64"]
+  needs:
+    - kmt_setup_env_secagent_x64
+    - upload_dependencies_secagent_x64
+    - upload_secagent_tests_x64
+  variables:
+    ARCH: "x86_64"
+  parallel:
+    matrix:
+      - TAG:
+          - "ubuntu_24.10"
+        TEST_SET: [cws_req]
+  after_script:
+    - !reference [.collect_outcomes_kmt]
+    - !reference [.upload_junit_kmt]
+
 kmt_run_secagent_tests_x64_ad:
   extends:
     - .kmt_run_secagent_tests
@@ -407,6 +431,7 @@ kmt_secagent_cleanup_x64:
   needs:
     - kmt_setup_env_secagent_x64
     - kmt_run_secagent_tests_x64
+    - kmt_run_secagent_tests_x64_required
     - kmt_run_secagent_tests_x64_ad
     - kmt_run_secagent_tests_x64_ebpfless
     - kmt_run_secagent_tests_x64_fentry
diff --git a/test/new-e2e/system-probe/test-runner/files/cws_req.json b/test/new-e2e/system-probe/test-runner/files/cws_req.json
new file mode 100644
index 0000000000000..4436d9ece915d
--- /dev/null
+++ b/test/new-e2e/system-probe/test-runner/files/cws_req.json
@@ -0,0 +1,9 @@
+{
+	"filters": {
+		"pkg/security": {
+			"run-only": [
+				"TestChmod"
+			]
+		}
+	}
+}