Senior Product Security Engineer

Job Summary

Collaborating with engineering teams, the full-time Senior Product Security Engineer will assess and mitigate security risks in the virtualization stack, develop threat models, and implement defense-in-depth strategies while working remotely.

Key responsibilities

• Propose and implement mitigations and defense-in-depth strategies based on threat modeling of the virtualization stack
• Provide technical expertise in systems architecture and kernel security to build comprehensive threat models
• Cultivate a security culture by mentoring engineering teams and overseeing the vulnerability management program

Required qualifications

• Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux)
• Experience assessing performance implications of code changes in virtualization stacks, particularly Qemu and KVM
• Proven record of partnering with engineering teams to address security challenges
• Ability to communicate security topics and provide actionable guidance to product teams
• Working knowledge of modern development concepts, including virtualized environments and containerization