Systems Security Engineer

What you'll do

• Identify and remediate security risks; strengthen tenant isolation, host hardening, network boundaries, and access controls.
• Build and operate automated security controls for secure configuration, vulnerability remediation, and intrusion detection and response.
• Investigate security incidents and drive remediation; partner with engineering and IT on secure defaults and standards.

What they ask for

• Strong Linux systems experience, including debugging production issues across kernel, networking, and storage.
• Experience with virtualization and Linux isolation primitives, and understanding of their security boundaries and tradeoffs.
• Experience securing production AWS environments, particularly IAM, networking, and audit logging.
• Ability to write and debug production code in Go, Rust, C, C++ or similar, and automate security changes through configuration management and infrastructure as code.

Nice to have

• CVE research, container or VM escape research, or CTF participation; experience securing multi-tenant infrastructure running untrusted workloads.
• Experience building eBPF detection tooling, securing software delivery pipelines, operating or securing Ceph or MinIO, or securing macOS infrastructure running untrusted workloads.

Pay

$225K – $300K • Offers Equity

Tools

Linux, Firecracker, KVM, namespaces, cgroups, eBPF, AWS, Go

AI focus

Use agent-driven development and debugging: direct coding agents, review their changes, and validate correctness and security.