Crusoe

Staff Kernel Security Engineer (Linux)

In short

This role strengthens Linux kernel and operating-system security through hardening, CVE triage, vulnerability research, secure code reviews, and incident-response support, with particular focus on auditing and hardening Cloud Hypervisor device models and vhost-user datapaths. It demands deep Linux kernel internals and security expertise, C-based secure coding, kernel debugging and security analysis tooling, and at least 5 years of industry experience including 3 years in low-level OS or kernel security. The role also involves mentoring junior engineers and collaborating across hardware, hypervisor, OS, infrastructure, and security teams. This is an onsite, full-time position in the US requiring the ability to pass a background check.

About the Role
You will strengthen kernel and operating-system security through hardening, CVE triage, vulnerability research, secure code reviews, auditing, and incident-response support. You will establish security guardrails, audit hypervisor isolation, balance security with performance, and mentor engineers on kernel security practices.
Requirements
•Deep knowledge of Linux kernel internals and security
•Knowledge of kernel vulnerabilities and exploitation techniques
•Experience with Linux kernel security mitigations
•Secure coding and security-focused code review experience in C
•Proficiency with kernel debugging and security analysis tools
•Familiarity with hardware-assisted security features
•Bachelor's degree in Computer Science, Computer Engineering, or a related field
•At least 5 years of relevant industry experience, including 3 years in low-level operating systems or kernel security
•Ability to pass a background check
•Experience with CVE remediation and automation
Responsibilities
•Implement kernel hardening and triage CVEs
•Enforce access controls, boot security, CI guardrails, and fuzzing coverage
•Research vulnerabilities and backport upstream security fixes
•Establish secure coding standards and conduct security-focused code reviews
•Develop and use security auditing, fuzzing, static-analysis, and dynamic-analysis tools
•Support kernel and operating-system security incident response
•Audit and harden Cloud Hypervisor device models and vhost-user datapaths
•Collaborate on security practices across hardware, hypervisor, operating-system, infrastructure, and security teams
•Mentor junior engineers on kernel security practices
•Debug and root-cause kernel-level security issues
Benefits
•Equity packages
•Restricted Stock Units
•Paid time off
•Paid holidays
•Leave of absence programs
•Health, dental, and vision insurance
•Employer HSA contributions
•Paid parental leave
•Life insurance
•Short-term disability insurance
•Long-term disability insurance
•Tuition reimbursement
•Mental health and wellness support
•Commuter benefits
•Cell phone stipend
•401(k) plan with up to 4% company match
•Volunteer time off
•Global travel insurance and emergency assistance
•Daily meals allowance

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot