1 month ago
Base Salary
$250k - $300k/yr
Responsibilities
- Implement Linux kernel security enhancements, configuration hardening, CVE triage, and backported upstream fixes.
- Enforce mandatory access controls, secure boot, CI guardrails, fuzzing coverage, and security hardening baselines.
- Research and analyze vulnerabilities across kernel, driver, and operating system components and develop proactive mitigations.
- Conduct secure code reviews and establish secure coding standards for kernel-level development in C.
- Use and develop tools for kernel security auditing, fuzzing, static analysis, dynamic analysis, and debugging.
- Audit and harden Cloud Hypervisor device models and vhost-user datapaths while reducing privilege and contributing upstream fixes.
- Advance confidential-computing primitives including AMD SEV-SNP and Intel TDX.
- Support security incident response, containment, recovery, and root-cause analysis for kernel- or OS-level compromises.
- Balance security improvements with performance requirements for high-performance AI infrastructure.
- Collaborate with hardware, hypervisor, OS, cloud infrastructure, and security operations teams.
- Provide technical guidance and mentorship to junior engineers.
- Own kernel CVE triage and deliver backported fixes through the production release process.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
- At least 5 years of relevant industry experience, including at least 3 years focused on low-level operating systems or kernel security.
- Deep knowledge of Linux kernel internals, including memory management, process scheduling, system calls, and I/O subsystems.
- Understanding of kernel vulnerabilities, exploitation techniques, CVE remediation, and remediation automation.
- Experience with Linux security mitigations including ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, SELinux, and AppArmor.
- Strong secure-coding background and security-focused code-review experience, particularly in C.
- Proficiency with kernel debugging and security analysis tools including GDB, crash, kgdb, valgrind, address sanitizers, and fuzzers.
- Familiarity with hardware-assisted security features such as Intel SGX, AMD SEV, and ARM TrustZone.
- Ability to pass a background check and embody the company values.
- Preferred experience with kernel security projects or open-source kernel security contributions.
- Preferred familiarity with hypervisor security and guest-kernel security interactions.
- Preferred experience with hardware security modules or Trusted Platform Modules.
- Preferred background in offensive security or kernel-level penetration testing.
Benefits
- Competitive compensation and equity packages, including Restricted Stock Units.
- Paid time off, paid holidays, leave of absence programs, and paid parental leave.
- Comprehensive health, dental, and vision insurance with employer HSA contributions.
- Paid life insurance and short- and long-term disability coverage.
- Professional development and tuition reimbursement.
- Mental health and wellness support.
- Commuter benefits, including parking and transit.
- Cell phone stipend.
- 401(k) retirement plan with company match up to 4% of salary.
- Volunteer time off.
- Global travel insurance and emergency assistance.
- Daily meals allowance and additional location-specific perks.
About Crusoe
Crusoe builds and operates GPU-powered data centers and an AI cloud platform for enterprises running large-scale AI training and inference. It vertically integrates energy supply with compute, using stranded and renewable power to reduce emissions and costs, and sells capacity via cloud services and managed infrastructure. Founded in 2018 and headquartered in Denver, the company is privately held.