Cloud Infrastructure Security Engineer Systems Kernel

Skills

About the Role

You will secure bare-metal and virtualized GPU cloud environments at the systems layer. You will design isolation controls, harden Linux and container platforms, assess infrastructure threats, write low-level security code, and lead technical responses to infrastructure incidents.

Requirements

• 5+ years of infrastructure or systems-level security engineering experience
• Knowledge of Linux kernel internals, including cgroups, namespaces, eBPF, and SELinux or AppArmor
• Understanding of KVM, QEMU, and workload and network isolation in multitenant environments
• Systems-level programming skills in C, Go, Rust, or Python
• Familiarity with GPU architecture and hardware-level security
• Experience securing bare-metal cloud infrastructure and mitigating lower-level CVEs
• Eligibility to work in the United States

Responsibilities

• Design and implement workload and network isolation for multitenant GPU bare-metal and virtualized environments
• Harden Linux kernel configurations, container runtimes, and orchestration layers against breakouts and privilege escalation
• Conduct security assessments and penetration testing of hypervisors, network stacks, and hardware interfaces
• Write C, Go, or Rust code for security controls, telemetry, and infrastructure-level fixes
• Evaluate and mitigate GPU architecture, PCIe pass-through, and shared-memory security risks
• Serve as the technical escalation point for infrastructure-level security incidents and develop forensic capabilities

Benefits

• Stock options
• Medical, dental, and vision plans
• Flexible PTO
• Remote-first work
• USD 1,200 home office and equipment stipend