Senior Product Security Engineer

Job Summary

Passionate about security in virtualization, the full-time Senior Product Security Engineer will assess and mitigate security risks, propose defense-in-depth strategies, and collaborate with engineering teams to enhance the security posture of the virtualization stack in a remote environment.

Key responsibilities

• Propose and implement mitigations and defense-in-depth strategies for threats identified in the virtualization stack
• Provide technical expertise to build threat models and recommend efficient designs that balance functionality and security
• Cultivate a security culture by mentoring teams on best practices and overseeing the vulnerability management program

Required qualifications

• Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux)
• Hands-on experience assessing performance implications of code changes in virtualization stacks, particularly Qemu and KVM
• Proven ability to partner with internal engineering teams to address security challenges collaboratively
• Strong communication skills for discussing security topics and providing actionable guidance to product teams
• Working knowledge of modern development concepts, including virtualized environments and containerization