Senior Staff Linux Security Engineer
$250k - $300k • Remote • Sunnyvale, CA - US • FullTime
Posted 3h ago
Job Location
Sunnyvale, CA - US
Tech Stack
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
AI Infrastructure Engineer
About the job
Crusoe is seeking a Senior Staff Software Engineer specializing in Linux Kernel Security to strengthen the security of our core Linux kernel and operating system components. This role is crucial for our AI cloud infrastructure, requiring a deep understanding of Linux kernel internals, security vulnerabilities, and mitigation techniques. You will be responsible for implementing kernel security enhancements, triaging CVEs, enforcing access controls, securing the boot path, and researching vulnerabilities. The position also involves advocating for secure development practices, conducting security-focused code reviews, and utilizing/developing tools for kernel security auditing. You will also provide expert support during security incidents and ensure security enhancements do not negatively impact system performance. This is a full-time position.
Responsibilities
- Implement kernel security enhancements and manage configuration hardening.
- Triage incoming CVEs to assess severity and exploitability.
- Enforce mandatory access controls and secure the boot path.
- Establish CI guardrails and fuzzing coverage to prevent regressions.
- Research vulnerabilities across kernel, driver, and OS components.
- Build proactive mitigations and backport upstream fixes to production.
- Establish and advocate for secure coding standards and best practices for kernel-level development.
- Conduct security-focused code reviews.
- Utilize and develop specialized tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis.
- Provide expert support during security incidents involving kernel or OS-level compromises.
- Ensure security enhancements do not unduly impact system performance.
- Audit, harden, and reduce privilege across Cloud Hypervisor device models and vhost-user datapaths.
- Contribute upstream security fixes and advance confidential computing primitives.
- Collaborate with other engineering teams to integrate security best practices.
- Provide technical guidance and mentorship to junior engineers on kernel security best practices.
- Debug and root-cause complex security-related issues at the kernel level.
Requirements
- Deep knowledge of Linux kernel internals with a strong focus on security aspects.
- Solid understanding of common kernel vulnerabilities and associated exploitation techniques.
- Experience with existing Linux kernel security mitigations.
- Strong background in secure coding principles and experience conducting security-focused code reviews, particularly in C.
- Proficiency with kernel debugging tools and security analysis tools.
- Familiarity with hardware-assisted security features and their relevance to kernel security.
- Bachelor's degree in Computer Science, Computer Engineering, or a related field.
- Minimum of 5 years of relevant industry experience with at least 3 years focused on low-level operating systems or kernel security.
- Ability to pass a background check.
- Embody company values.