Platform Security Engineering, Operating Systems

📋 Description

• Design hardened OS configurations for AI workloads across diverse hardware.
• Minimize kernel/userspace attack surfaces by removing unnecessary components.
• Develop kernel security policies with SELinux, AppArmor, and LSMs.
• Implement and maintain full-disk encryption for diverse storage systems.
• Build security infrastructure for AI systems, research environments, and production.
• Create OS-level attestation and integrity monitoring systems.

🎯 Requirements

• Deep knowledge of Linux internals, including kernel subsystems and security frameworks (SELinux, AppArmor, seccomp).
• Experience with kernel hardening techniques and exploit mitigation.
• Strong programming skills in C and systems languages.
• Experience with eBPF for security monitoring and enforcement.
• Understanding of virtualization and container security.
• Experience with security-focused Linux distributions.

🎁 Benefits

• Competitive compensation and benefits.
• Optional equity donation matching.
• Generous vacation and parental leave.
• Flexible working hours.
• Lovely office space in San Francisco.