← All roles

Senior Staff Linux Security Engineer

Crusoe· Cloud Engineering
Apply on company site
Sunnyvale, CA - US$250k - $300kFull-timePosted 2w ago

About the role

Senior Staff Software Engineer specializing in Linux Kernel Security to strengthen the security posture of Crusoe’s core Linux kernel and OS components for AI cloud infrastructure.

Responsibilities

  • Kernel Hardening & CVE Triage: Implement kernel security enhancements, manage configuration hardening, and triage incoming CVEs to assess severity and exploitability.
  • Access Control, Boot Security & Guardrails: Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage to prevent regressions.
  • Vulnerability Research & Analysis: Research vulnerabilities across kernel, driver, and OS components to build proactive mitigations and backport non-trivial upstream fixes to production.
  • Secure Development Practices: Establish and advocate for secure coding standards and best practices for kernel-level development. Conduct security-focused code reviews to identify and eliminate potential vulnerabilities early in the development lifecycle.
  • Security Auditing & Tools: Utilize and develop specialized tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis to uncover hidden vulnerabilities and ensure compliance with security policies.
  • Incident Response Support: Provide expert support during security incidents involving kernel or OS-level compromises, assisting with root-cause analysis, containment, and recovery efforts.
  • Performance and Security Balance: Ensure security enhancements do not unduly impact system performance for high-performance AI infrastructure.
  • First 90 days: Own kernel CVE triage end to end and ship at least one backported fix through full release path; independent assessment of kernel configuration weaknesses.
  • First year: Define SLA for kernel security response by severity; enforce hardening baseline in CI; audit Cloud Hypervisor and close high-value isolation gaps.
  • Cloud Hypervisor & Isolation: Audit, harden, and reduce privilege across Cloud Hypervisor device models and vhost-user datapaths; contribute upstream security fixes and advance confidential computing primitives (AMD SEV-SNP, Intel TDX).
  • Cross-Functional Collaboration: Work with hardware, hypervisor, OS, cloud infrastructure, and security operations teams to implement security best practices across the stack.
  • Technical Leadership: Mentor junior engineers on kernel security best practices and foster security-focused culture.
  • Debugging and Root-Cause Analysis: Debug and root-cause complex security-related kernel issues.

Qualifications

  • Linux Kernel Security Expertise: Deep knowledge of Linux kernel internals with a focus on security.
  • Vulnerability & Exploitation Knowledge: Understanding of kernel vulnerabilities and exploitation techniques.
  • Security Mitigations: Familiarity with mitigations like ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, LSMs (SELinux/AppArmor).
  • Secure Coding: Strong secure coding principles and experience with security-focused code reviews in C.
  • Debugging & Analysis Tools: Proficiency with kernel debugging tools (GDB, crash, kgdb) and security analysis tools (valgrind, ASan, fuzzers).
  • Hardware Security Concepts: Familiarity with Intel SGX, AMD SEV, ARM TrustZone and their relevance to kernel security.
  • Education & Experience: Bachelor's degree in CS/CE or related field; at least 5 years of relevant experience with minimum 3 years in low-level OS/kernel security.
  • Safety and Compliance: Ability to pass a background check.
  • Company Values: Demonstrated alignment with company values.
  • CVE Remediation & Automation: Experience dealing with CVE remediation and automation.
  • First 90 days/First year commitments: As specified in responsibilities.

Skills

Required:Linux kernel internalsVulnerability research & exploitationSecurity mitigations (ASLR, NX/DEP, SMEP/SMAP, KASLR, namespaces, cgroups, LSMs)Secure coding & code reviews (C)Debugging & analysis tools
Nice to have:Hardware security concepts

Benefits

  • Competitive compensation and equity packages
  • Restricted Stock Units
  • Paid time off, paid holidays & leave of absence programs
  • Comprehensive health, dental & vision insurance
  • Employer contributions to HSA account
  • Paid parental leave
  • Paid life insurance, short-term and long-term disability
  • Professional development & tuition reimbursement
  • Mental health & wellness support
  • Commuter benefits (parking & transit)
  • Cell phone stipend
  • 401(k) Retirement plan with company match up to 4% of salary
  • Volunteer time off
  • Global travel insurance & emergency assistance
  • Daily meals allowance
  • Additional perks & programs specific to location
Last updated Oct 7, 2026. Interested? Apply on the company site.

About Crusoe

The AI factory company | Renewable-powered AI infrastructure

Crusoe provides next-gen AI infrastructure and cloud compute using an energy-first approach. Deploy AI workloads at scale with reliable performance and 24/7 support.

AI infrastructureData centersEdge computingGPU computingRenewable energycloud computeenergy-first approachsetter-30
Company profileWebsite

More open roles at Crusoe