Staff Security Engineer

Job Summary

Passionate about enhancing security, the full-time Staff Product Security Engineer will assess and mitigate risks in the virtualization stack by building threat models, proposing defense-in-depth strategies, and collaborating with engineering teams, all while working remotely.

Key responsibilities

• Propose and implement mitigations and defense-in-depth strategies based on threat modeling of the virtualization stack
• Provide technical expertise in systems architecture and kernel security features to develop comprehensive threat models
• Cultivate a security culture by mentoring engineering teams and overseeing the vulnerability management program

Required qualifications

• Deep familiarity with at least one kernel security feature (e.g., AppArmor, SELinux, Landlock)
• Experience assessing performance implications of code changes to virtualization stacks, particularly in Qemu and KVM
• Proven ability to partner with internal engineering teams to address security challenges collaboratively
• Strong communication skills regarding security topics and vulnerability classes
• Working knowledge of modern development concepts, including virtualized environments and containerization