SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
CIQ builds enterprise infrastructure powering demanding workloads across operating systems, AI infrastructure, high-performance computing, and cloud-native orchestration. The company is the founding support partner of Rocky Linux and develops RLC Pro Enterprise Linux distributions, Fuzzball workload orchestration, Warewulf Pro cluster provisioning, and Ascender Pro automation. Customers include major enterprises, government agencies, and research institutions in HPC, AI/ML, defense, and regulated industries.
This Principal Linux Security Engineer role seeks a deep technical expert in Linux operating system security. This is not a traditional management position but rather a senior individual contributor role focused on specialized security expertise.
Key responsibilities include:
• Security errata management: Understanding and creating CSAF, VEX, and security advisories; integrating them into repository updateinfo and security feeds for scanner ingestion.
• OS-level compliance: Building STIG and DIS profiles, improving OpenSCAP implementations, and developing Ansible scripts to apply security profiles (not just applying existing scripts).
• Proactive OS security: Implementing build flags, LKRG, SELinux, and other hardening measures that balance security with usability.
• Security tooling: Building tools to accelerate security processes and leveraging AI to speed development, testing, and release cycles.
• CVE expertise: Understanding CVE scoring methodologies (CVSS calculator proficiency), determining software affectedness, and how build and configuration choices impact vulnerability exposure.
The role requires genuine engagement with Linux security at a deep technical level. The company emphasizes that candidates should only apply if the specific technical requirements resonate with their background.
**Requirements:**
• Proven work experience in Security and/or Linux Engineering with focus on the Linux operating system
• Minimum 4 years of experience in Linux security
• Minimum 2 years of experience building Linux packages
