1 month ago
Base Salary
$215k - $260k/yr
Responsibilities
- Implement Linux kernel security enhancements, configuration hardening, CVE triage, and vulnerability mitigations.
- Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage.
- Research kernel, driver, and operating system vulnerabilities and backport non-trivial upstream fixes.
- Define secure coding practices and conduct security-focused kernel code reviews, particularly in C.
- Develop and use tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis.
- Support incident response, root-cause analysis, containment, and recovery for kernel- or OS-level compromises.
- Balance security improvements with performance requirements for high-performance AI infrastructure.
- Audit and harden Cloud Hypervisor device models and vhost-user datapaths, reduce privilege, and contribute upstream security fixes.
- Advance confidential computing primitives including AMD SEV-SNP and Intel TDX.
- Collaborate with hardware, hypervisor, OS, cloud infrastructure, and security operations teams.
- Provide technical guidance and mentorship to junior engineers.
- Own end-to-end kernel CVE triage and ship backported fixes through the release process.
- Define kernel security response SLAs and hardening baselines enforced in CI across supported SKUs.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
- At least 5 years of relevant industry experience, including at least 3 years focused on low-level operating systems or kernel security.
- Deep knowledge of Linux kernel internals, including memory management, process scheduling, system calls, and I/O subsystems.
- Understanding of kernel vulnerabilities such as privilege escalation, information disclosure, and denial of service, along with exploitation techniques.
- Experience with Linux security mitigations including ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, SELinux, and AppArmor.
- Strong secure-coding background and security-focused code review experience, particularly in C.
- Proficiency with GDB, crash, kgdb, valgrind, address sanitizers, and fuzzers.
- Familiarity with hardware-assisted security features such as Intel SGX, AMD SEV, and ARM TrustZone.
- Experience with CVE remediation and automation.
- Ability to pass a background check.
- Preferred experience contributing to kernel security projects or open-source kernel security initiatives.
- Preferred familiarity with hypervisor security and guest-kernel security interactions.
- Preferred experience with hardware security modules or Trusted Platform Modules.
- Preferred background in offensive security or kernel-level penetration testing.
Benefits
- Competitive compensation and equity packages, including Restricted Stock Units.
- Paid time off, paid holidays, and leave of absence programs.
- Comprehensive health, dental, and vision insurance.
- Employer contributions to an HSA account.
- Paid parental leave.
- Paid life insurance and short- and long-term disability coverage.
- Professional development and tuition reimbursement.
- Mental health and wellness support.
- Commuter benefits for parking and transit.
- Cell phone stipend.
- 401(k) retirement plan with company match up to 4% of salary.
- Volunteer time off.
- Global travel insurance and emergency assistance.
- Daily meals allowance.
- Additional location-specific perks and programs.
- Full-time employment with bonus eligibility.
About Crusoe
Crusoe builds and operates GPU-powered data centers and an AI cloud platform for enterprises running large-scale AI training and inference. It vertically integrates energy supply with compute, using stranded and renewable power to reduce emissions and costs, and sells capacity via cloud services and managed infrastructure. Founded in 2018 and headquartered in Denver, the company is privately held.