Security Software Engineer
Core
Security Software Engineer protecting Linux, open source software, and products across cloud, AI, IoT, and enterprise infrastructure.
Role type
Senior IC security software engineer
Builds
Security features, hardening automation, and upstream open source contributions for Linux and cloud/AI/IoT products
Domain
Cybersecurity, Linux systems, Open Source, Cloud Infrastructure
Required skills
C, C++, Python, Go, Rust, Java, Ruby, PHP, JavaScript/TypeScript, Linux (Debian/Ubuntu), Open Source workflows, Security architecture, Secure coding, Vulnerability analysis, Software hardening, Threat modeling, Static analysis, Fuzzing, Cryptography (OpenSSL/Libgcrypt), Compliance frameworks (FIPS/Common Criteria)
Preferred skills
Linux kernel development, OVAL, Low-level Linux cryptography APIs, Performance engineering
Technologies
Linux, Debian, Ubuntu, OpenSSL, Libgcrypt, FIPS, Common Criteria, OVAL
Responsibilities
Define, implement, test, and document new security features across software products and infrastructure; Lead security-focused initiatives within product engineering teams and promote security throughout the software development lifecycle; Analyze, reproduce, remediate, and test vulnerabilities in open source software; Audit source code and software architectures to identify security weaknesses and recommend appropriate mitigations; Apply threat modeling, architecture and design reviews, tabletop exercises, static analysis, fuzzing, and other proactive security practices; Contribute security fixes and improvements to Ubuntu and upstream open source projects; Integrate security tools into development infrastructure, pipelines, and engineering processes; Design and develop hardening automation for Linux-based environments; Support security certification initiatives and help maintain compliance with relevant standards; Extend and enhance Linux cryptographic components to address country-specific compliance requirements; Collaborate with external partners on security initiatives such as Center for Internet Security benchmarks; Develop, test, and maintain software capabilities supporting security, reliability, and compliance objectives; Provide security guidance, technical support, and best-practice recommendations to other engineering teams; Monitor emerging security threats, technologies, methodologies, and industry developments; Participate in open source communities and contribute to broader security initiatives across the ecosystem
Seniority
Senior, hands-on IC
