Security Engineer

A well-funded client is seeking a senior Security Engineer to secure infrastructure that runs untrusted code at massive scale. This role is focused on Linux and infrastructure security, balancing strong isolation guarantees with high-performance requirements in a distributed environment.


Responsibilities


Secure high-scale infrastructure executing untrusted workloads


Design and implement defense-in-depth security for sandboxed and microVM-based systems


Build real-time threat detection across large numbers of concurrent environments


Apply Linux security primitives to enforce isolation and runtime protection


Ensure compliance with enterprise security standards while maintaining low-latency performance

Tech Stack


Go, Rust, C, TypeScript, Linux security, container hardening


Qualifications


5+ years of experience securing production infrastructure


Deep hands-on experience with Linux security primitives such as seccomp, eBPF, and namespaces


Experience securing distributed systems at scale


Familiarity with compliance frameworks including SOC 2, ISO 27001, and GDPR


Comfortable working close to the system; kernel-level security experience is a plus


Why is This a Great Opportunity


Cover full healthcare, vision, and dental insurance, and offer unlimited PTO.


Series A startup with 7-figure revenue


Small team, real impact


Comments


Please highlight the must haves in the submittal.


They have to have all the must haves to get an interview.


Must have:

• Fast paced startup experience (ideally, seed-Series B) working on a small team (<50 total)
• Proficiency in Go, Rust, or TypeScript.
• Deep expertise in Linux security primitives (seccomp, eBPF, namespaces).
• Willingness to work 4 days on-site in San Francisco.
• 5+ years of experience in production security infrastructure, securing distributed systems at scale
• Experience securing distributed systems at massive scale.
• Experience with container security and microVM hardening.

Like to have


Comfortable implementing kernel-level security controls