What You'll Do- Design and implement foundational Linux security features and software infrastructure to protect large-scale AI/ML workloads running across thousands of GPUs in modern cloud platforms.
- Develop advanced security capabilities for containerized environments, including container runtime security, image signing and verification, vulnerability scanning, namespace isolation, and control groups.
- Develop kernel integrity monitoring solutions using Linux Integrity Measurement Architecture (IMA), Extended Verification Module (EVM), and eBPF-based observability, integrating with SEIM systems for real-time detection and forensic analysis of kernel-level threats.
- Engineer security capabilities for virtualized environments, including hypervisor hardening (KVM/QEMU), secure VM provisioning, encrypted storage, inter-VM network segmentation, and integration of hardware-assisted virtualization security features.
- Perform system hardening by applying security baselines, disabling unnecessary services, enforcing strong authentication, configuring kernel parameters, and automating compliance through configuration management tools.
- Architect and implement isolation technologies, including hardware-based enclaves, micro-segmentation, and sandboxing mechanisms to ensure a strong separation between workloads in multi-tenant environments.
Some telecommuting permitted (hybrid)
You- Have a Master's degree or foreign equivalent in Computer Engineering, Computer Science, or related field
- Have 3+ years of experience as Senior Software Engineer, Senior Systems Engineer, or related occupation
- Must have at least 1 year of prior work experience in each of the following
- Linux-based production systems with focus on security at the OS and kernel level: SELinux, AppArmor, seccomp, namespaces, cgroups, integrity measurement, and TPM.
- Linux kernel internals and securing kernel subsystems: Syscall filtering, LSMs, audit frameworks, and eBPF for security observability.
- Building or securing core cloud infrastructure: secure virtualization, KVM, QEMU, hardened images, secure boot, confidential computing, software-defined perimeter, network segmentation, firewalling, and identity and access management.
- Designing and implementing end-to-end security architecture for large-scale, distributed systems.
- Threat modeling, risk analysis, and mitigation planning for both x86_64 and aarch64 platforms.
- Programming languages: C, Rust, Python, and Go.
- Architecting and implementing isolation technologies including hardware-based enclaves: Intel SGX, AMD SEV, and ARM TrustZone.
We offer generous cash & equity compensation
Health, dental, and vision coverage for you and your dependents
Wellness and commuter stipends for select roles
401k Plan with 2% company match (USA employees)
Flexible paid time off plan that we all actually use
