Product Security Engineer

• Develop and maintain secure critical services for Linux system
• Implement secure boot chains from fused hardware keys, ensuring verified OS and data partitions with rollback protection
• Integrate OP-TEE to safeguard sensitive assets such as mTLS certificates and disk encryption keys
• Harden system services using least-privilege operations, systemd features, namespacing, and syscall filtering
• Build hardening templates and automation tools to streamline security boundary enforcement for developers
• Automate security validation processes within CI/CD pipelines
• Design and enforce device access controls for Linux systems

• Experience contributing and shipping C/C++ code (or similar) to production
• Strong experience with Linux operating system internals and security mechanisms
• Hands-on expertise with secure boot and verified boot implementations
• Familiarity with Trusted Execution Environments (e.g., OP-TEE or similar)
• Proven track record of applying least-privilege principles and hardening root-level services
• Proficiency with systemd and sandboxing, including namespacing, privilege restrictions, syscall filtering, and other techniques
• Experience designing security tools, automation, and templates for developers
• Knowledge of device access control and Linux permissions management
• Solid understanding of CI/CD integration for security validation
• Experience with NVIDIA Orin or similar SoC platform preferred
• Expertise in software development, including code auditing

Experience with NVIDIA Orin or similar SoC platform preferred

• Health, dental, and vision insurance
• 401(k) with company match
• Paid time off and holidays