SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 250,000 - 300,000 / annual
Crusoe is a vertically integrated AI infrastructure company building energy-efficient solutions for AI compute. The company owns and operates the full stack from power generation to cloud services, addressing the critical bottleneck of power availability for AI workloads.
As a Senior Staff Linux Security Engineer, you will lead kernel security initiatives across Crusoe's AI infrastructure platform. This is a technical leadership role focused on hardening the Linux kernel and operating system components that underpin the company's hardware and software solutions.
Key responsibilities include:
- Kernel Hardening & CVE Management: Implement kernel security enhancements, manage configuration hardening, and triage incoming CVEs to assess severity and exploitability.
- Access Control & Boot Security: Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage.
- Vulnerability Research: Research vulnerabilities across kernel, driver, and OS components; build proactive mitigations and backport upstream fixes to production.
- Secure Development Leadership: Establish secure coding standards for kernel-level development, conduct security-focused code reviews, and mentor junior engineers on kernel security best practices.
- Security Auditing & Tools: Utilize and develop specialized tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis.
- Incident Response: Provide expert support during security incidents involving kernel or OS-level compromises, including root-cause analysis and recovery.
- Cloud Hypervisor Security: Audit, harden, and reduce privilege across Cloud Hypervisor device models; contribute upstream security fixes and advance confidential computing primitives (AMD SEV-SNP, Intel TDX).
- Cross-Functional Collaboration: Work with hardware, hypervisor, OS development, cloud infrastructure, and security operations teams to integrate security best practices across the stack.
- Performance & Security Balance: Ensure security enhancements do not unduly impact system performance in high-performance AI infrastructure.
First 90 days: Own kernel CVE triage end-to-end and ship at least one backported fix through the full release path. Develop an independent assessment of kernel configuration weaknesses.
First year: Establish defined SLAs for kernel security response by severity and consistently meet them. Define and enforce a hardening baseline in CI across supported SKUs. Complete Cloud Hypervisor audit and close or schedule highest-value isolation gaps.
Requirements:
- Bachelor's degree in Computer Science, Computer Engineering, or related field
- Minimum 5 years of relevant industry experience, with at least 3 years focused on low-level operating systems or kernel security
- Deep knowledge of Linux kernel internals (memory management, process scheduling, system calls, I/O subsystems) with strong security focus
- Solid understanding of common kernel vulnerabilities (privilege escalation, information disclosure, denial of service) and exploitation techniques
- Experience with Linux kernel security mitigations (ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, LSMs like SELinux/AppArmor)
- Strong background in secure coding principles, particularly in C, with experience conducting security-focused code reviews
- Proficiency with kernel debugging tools (GDB, crash, kgdb) and security analysis tools (valgrind, address sanitizers, fuzzers)
- Familiarity with hardware-assisted security features (Intel SGX, AMD SEV, ARM TrustZone) and their kernel security relevance
- Experience with CVE remediation and automation
- Must be able to pass a background check
Bonus qualifications:
- Experience with kernel security projects or open-source kernel security contributions
- Familiarity with hypervisor security and hypervisor-guest kernel interactions
- Experience with hardware security modules (HSMs) or Trusted Platform Modules (TPMs)
- Background in offensive security or penetration testing at the kernel level
