3 days ago
Base Salary
$170k - $205k/yr
Responsibilities
- Implement Linux kernel security enhancements, configuration hardening, CVE triage, and vulnerability mitigations.
- Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage.
- Research kernel, driver, and operating system vulnerabilities and backport non-trivial upstream fixes to production.
- Establish secure coding practices and conduct security-focused code reviews, particularly for C code.
- Use and develop tools for kernel security auditing, fuzzing, static analysis, dynamic analysis, debugging, and vulnerability discovery.
- Audit and harden Cloud Hypervisor device models and vhost-user datapaths, reduce privilege, and improve confidential computing isolation.
- Support security incident response, root-cause analysis, containment, and recovery for kernel- or OS-level compromises.
- Balance security enhancements with performance requirements for high-performance AI infrastructure.
- Collaborate with hardware, hypervisor, OS, cloud infrastructure, and security operations teams.
- Provide technical guidance and mentorship to junior engineers.
- Own kernel CVE triage end to end and ship backported fixes through the full release path.
- Define kernel security response SLAs and hardening baselines and enforce them across supported SKUs.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
- At least 5 years of relevant industry experience, including at least 3 years focused on low-level operating systems or kernel security.
- Deep knowledge of Linux kernel internals, including memory management, process scheduling, system calls, and I/O subsystems.
- Understanding of kernel vulnerabilities, exploitation techniques, and security mitigations such as ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, SELinux, and AppArmor.
- Strong secure coding background and experience conducting security-focused code reviews in C.
- Proficiency with kernel debugging and security analysis tools such as GDB, crash, kgdb, valgrind, address sanitizers, and fuzzers.
- Familiarity with hardware-assisted security features including Intel SGX, AMD SEV, and ARM TrustZone.
- Experience with CVE remediation and automation.
- Ability to pass a background check and demonstrate the company’s values.
- Preferred experience includes kernel security projects or open-source contributions, hypervisor security, HSMs, TPMs, and kernel-level offensive security or penetration testing.
Benefits
- Competitive compensation, bonus, and equity packages, including Restricted Stock Units.
- Paid time off, paid holidays, and leave of absence programs.
- Comprehensive health, dental, and vision insurance.
- Employer HSA contributions, paid parental leave, paid life insurance, and short- and long-term disability coverage.
- Professional development, tuition reimbursement, and mental health and wellness support.
- Commuter benefits, a cell phone stipend, and a 401(k) plan with company match up to 4% of salary.
- Volunteer time off, global travel insurance, emergency assistance, daily meal allowance, and location-specific perks.
About Crusoe
Crusoe builds and operates GPU-powered data centers and an AI cloud platform for enterprises running large-scale AI training and inference. It vertically integrates energy supply with compute, using stranded and renewable power to reduce emissions and costs, and sells capacity via cloud services and managed infrastructure. Founded in 2018 and headquartered in Denver, the company is privately held.