Senior Software Engineer - Security
Crusoe · San Francisco, CA - US
About this role
## Senior Software Engineer - Security ### About Crusoe Crusoe is on a mission to accelerate the abundance of energy and intelligence. As a vertically integrated AI infrastructure company, we own and operate each layer of the stack—from electrons to tokens—to power the world’s most ambitious AI workloads. ### About the Role The Crusoe Cloud Software Development team is seeking a **Senior Software Engineer specializing in Linux Kernel Security**. This role is critical to strengthening the security posture of our core Linux kernel and operating system components that underpin our AI cloud hardware and software solutions. This is a **full-time** position. ### What You’ll Be Working On - **Kernel Hardening & CVE Triage:** Implement kernel security enhancements, manage configuration hardening, and triage incoming CVEs to assess severity and exploitability. - **Access Control, Boot Security & Guardrails:** Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage to prevent regressions. - **Vulnerability Research & Analysis:** Research vulnerabilities across kernel, driver, and OS components; build proactive mitigations and backport non-trivial upstream fixes to production. - **Secure Development Practices:** Establish and advocate for secure coding standards; conduct security-focused code reviews to identify and eliminate vulnerabilities early. - **Security Auditing & Tools:** Use and develop tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis to uncover hidden vulnerabilities and ensure compliance. - **Incident Response Support:** Support security incidents involving kernel/OS-level compromises with root-cause analysis, containment, and recovery. - **Performance and Security Balance:** Ensure security enhancements don’t unduly impact system performance. - **First 90 days:** Own kernel CVE triage end to end and ship at least one backported fix through the full release path. - **First year:** Meet a defined kernel security response SLA by severity; enforce a hardening baseline in CI and roll it out across supported SKUs; ensure Cloud Hypervisor isolation gaps are closed or scheduled. - **Cloud Hypervisor & Isolation:** Audit and harden Cloud Hypervisor device models and vhost-user datapaths; contribute upstream security fixes; advance confidential computing primitives (AMD SEV-SNP, Intel TDX). - **Cross-Functional Collaboration:** Partner with hardware, hypervisor, OS development, cloud infrastructure, and security operations. - **Technical Leadership:** Mentor junior engineers and foster a security-aware culture. - **Debugging & Root-Cause Analysis:** Debug and root-cause complex security issues at the kernel level. ### What You’ll Bring to the Team - **Linux Kernel Security Expertise:** Deep knowledge of Linux kernel internals (memory management, scheduling, syscalls, I/O) with strong security focus. - **Vulnerability & Exploitation Knowledge:** Understanding of common kernel vulnerabilities (privilege escalation, info disclosure, DoS) and exploitation techniques. - **Security Mitigations:** Experience with mitigations such as ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, and LSMs (SELinux/AppArmor). - **Secure Coding:** Strong secure coding background (especially in C) and security-focused code review experience. - **Debugging & Analysis Tools:** Proficiency with kernel debugging tools (GDB, crash, kgdb) and security analysis tools (valgrind, sanitiz
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.