Staff Kernel Security Engineer

Responsibilities

• Implement Linux kernel security enhancements, configuration hardening, CVE triage, vulnerability mitigations, and backported upstream fixes.
• Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage.
• Research vulnerabilities across kernel, driver, and OS components and conduct security-focused code reviews.
• Develop and use tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis.
• Audit and harden Cloud Hypervisor device models and vhost-user datapaths while reducing privilege and contributing upstream fixes.
• Advance confidential computing primitives including AMD SEV-SNP and Intel TDX.
• Support security incident response, containment, recovery, debugging, and root-cause analysis for kernel and OS compromises.
• Balance security improvements with the performance requirements of high-performance AI infrastructure.
• Provide technical guidance and mentorship to junior engineers and collaborate across engineering and security teams.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
• At least 5 years of relevant industry experience, including at least 3 years focused on low-level operating systems or kernel security.
• Deep knowledge of Linux kernel internals, including memory management, process scheduling, system calls, and I/O subsystems.
• Understanding of kernel vulnerabilities, exploitation techniques, CVE remediation, and automation.
• Experience with Linux kernel security mitigations such as ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, and LSMs.
• Strong secure coding background and security-focused code review experience, particularly in C.
• Proficiency with kernel debugging and security analysis tools such as GDB, crash, kgdb, valgrind, address sanitizers, and fuzzers.
• Familiarity with hardware-assisted security features including Intel SGX, AMD SEV, and ARM TrustZone.
• Ability to pass a background check.
• Preferred qualifications include kernel security open-source contributions, hypervisor security experience, HSM or TPM experience, and kernel-level offensive security or penetration-testing experience.

Benefits

• Competitive compensation, bonus, equity packages, and Restricted Stock Units.
• Paid time off, paid holidays, leave programs, and paid parental leave.
• Comprehensive health, dental, and vision insurance, plus HSA contributions.
• Paid life insurance and short-term and long-term disability coverage.
• Professional development, tuition reimbursement, and mental health and wellness support.
• Commuter benefits, a cell phone stipend, daily meal allowance, and location-specific perks.
• 401(k) retirement plan with company match up to 4% of salary.
• Volunteer time off and global travel insurance with emergency assistance.
• Full-time position.