Senior Software Engineer (Android VMs)

Responsibilities

• Design, build, and maintain Android VMs running on crosvm, including VMM configuration, virtio device models, and guest/host integration.
• Bring up and boot Android guest images across the kernel, bootloader, init, and Android framework layers.
• Harden the virtualization boundary by reducing attack surface, sandboxing device backends, and analyzing guest-to-host and host-to-guest threats.
• Implement and validate secure boot and VM chain-of-trust features, including measured and verified boot, key management, and rollback protection.
• Analyze and mitigate Android VM security issues and contribute to threat modeling, security reviews, and vulnerability remediation.
• Debug low-level issues across the hypervisor/VMM, guest kernel, and Android userspace using appropriate tracing and debugging tools.
• Collaborate with platform, kernel, and security teams to resolve issues spanning hardware, firmware, and software.
• Document architecture, security properties, trust boundaries, and design decisions.

Requirements

• Strong systems programming experience in C/C++ and Rust, including memory safety, concurrency, and performance optimization under real constraints.
• Hands-on experience with crosvm or a comparable VMM such as QEMU, rust-vmm, or Firecracker, including device models, virtio, VM lifecycle, and VMM configuration.
• Understanding of virtualization and hardware-assisted virtualization, including KVM, guest/host memory management, vCPUs, MMIO, IOMMU, and virtio transport.
• Knowledge of Android VM security, guest/host isolation, VMM and device-backend sandboxing, and guest-to-host attack surfaces.
• Knowledge of Android platform security fundamentals, including SELinux, verified boot, AVB, dm-verity, keystore, KeyMint, and the Android trust model.
• Knowledge of secure boot and chain-of-trust concepts, including measured versus verified boot, signing, key management, rollback protection, and roots of trust.
• Ability to work from specifications, kernel and driver source, and register-level documentation.
• Ability to debug low-level systems issues using kernel logs, ftrace, perf, gdb, and VMM tracing or logging across host and guest environments.
• Git proficiency.
• Eligibility to obtain and maintain a U.S. Security Clearance.
• Preferred experience includes Android Virtualization Framework, pVM/protected VMs, microdroid, Linux kernel development, drivers, virtio backends/frontends, kernel debugging, TEE/TrustZone, hardware roots of trust, Android bootloaders, cryptographic key provisioning, attestation, VM and device lifecycle management, fuzzing, seccomp, minijail, VMM hardening, CI for systems/kernel builds, and automated VM image testing.
• Additional desirable experience includes Qualcomm platform security, QFPROM/eFuses, QTEE, PBL/SBL/XBL, secure debug, authenticated debug, anti-rollback, AOSP, crosvm, rust-vmm, upstream Linux kernel contributions, Android CTS/VTS, or comparable platform validation.

Benefits

• Comprehensive competitive benefits are available at little to no cost to full-time employees.
• Highly competitive equity grants are included in the majority of full-time offers.
• The role is a full-time position.