Principal Linux Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and utilize operating-system security errata, including CSAF, VEX, advisories, repository update information, and security feeds for scanners.

• Create STIG and DIS compliance profiles.

• Enhance OpenSCAP and generate Ansible scripts for applying security profiles.

• Implement proactive security measures for Linux OS using build flags, LKRG, and SELinux while maintaining usability.

• Develop tools and leverage AI to expedite development, testing, and release processes.

• Evaluate CVEs utilizing the CVSS calculator and assess software vulnerability based on build and configuration.

⛳️ Requirements

• Demonstrated work experience in Security and/or Linux Engineering with an emphasis on the Linux operating system.

• Minimum of 4 years of experience in Linux security and at least 2 years in building Linux packages.

• Familiarity with security errata in operating systems, including CSAF, VEX, advisories, repository update information, and security feeds.

• Experience in developing STIG and DIS compliance profiles.

• Proficient in OpenSCAP and capable of constructing Ansible scripts to implement security profiles.

• Knowledgeable in proactive Linux OS security measures, including build flags, LKRG, and SELinux.

• Competent in creating tools and utilizing AI to enhance development, testing, and release efficacy.

• Proficient in CVE scoring and experienced with the CVSS calculator.

• Ability to ascertain whether software is impacted by a CVE and how build and configuration influence vulnerability.

🏝️ Benefits

• Medical, dental, and vision insurance.

• Flexible paid time off.

• Employee stock options.

• Remote work; no travel required for most positions.