SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 215,000 - 260,000 / annual
Crusoe is a vertically integrated AI infrastructure company building the future of energy-efficient AI compute. The company owns and operates each layer of the stack—from electrons to tokens—to power the world's most ambitious AI workloads, with an energy-first approach that makes AI infrastructure better for the world.
The Crusoe Cloud Software Development team is seeking a Staff Software Engineer specializing in Linux Kernel Security to strengthen the security posture of core Linux kernel and operating system components underpinning the company's cutting-edge hardware and software solutions for AI cloud.
Key responsibilities include:
- Implement kernel security enhancements, manage configuration hardening, and triage incoming CVEs to assess severity and exploitability
- Enforce mandatory access controls, secure the boot path, and establish CI guardrails and fuzzing coverage to prevent regressions
- Research vulnerabilities across kernel, driver, and OS components to build proactive mitigations and backport non-trivial upstream fixes to production
- Establish and advocate for secure coding standards and best practices for kernel-level development; conduct security-focused code reviews
- Utilize and develop specialized tools for kernel security auditing, fuzzing, static analysis, and dynamic analysis
- Provide expert support during security incidents involving kernel or OS-level compromises, assisting with root-cause analysis, containment, and recovery
- Ensure security enhancements do not unduly impact system performance, critical for high-performance AI infrastructure
- Audit, harden, and reduce privilege across Cloud Hypervisor device models and vhost-user datapaths; contribute upstream security fixes and advance confidential computing primitives (AMD SEV-SNP, Intel TDX)
- Collaborate closely with hardware, hypervisor, OS development, cloud infrastructure, and security operations teams
- Provide technical guidance and mentorship to junior engineers on kernel security best practices
- Debug and root-cause complex security-related issues at the kernel level
First 90 days: Own kernel CVE triage end to end and ship at least one backported fix through the full release path; develop an independent assessment of kernel configuration weaknesses.
First year: Establish defined SLA for kernel security response by severity and consistently meet it; define and enforce a hardening baseline in CI across supported SKUs; audit Cloud Hypervisor and close or schedule highest-value isolation gaps.
Requirements:
- Bachelor's degree in Computer Science, Computer Engineering, or related field
- Minimum 5 years of relevant industry experience, with at least 3 years focused on low-level operating systems or kernel security
- Proven deep knowledge of Linux kernel internals (memory management, process scheduling, system calls, I/O subsystems) with strong focus on security aspects
- Solid understanding of common kernel vulnerabilities (privilege escalation, information disclosure, denial of service) and exploitation techniques
- Experience with Linux kernel security mitigations (ASLR, DEP/NX, SMEP/SMAP, KASLR, namespaces, cgroups, LSMs like SELinux/AppArmor)
- Strong background in secure coding principles and experience conducting security-focused code reviews, particularly in C
- Proficiency with kernel debugging tools (GDB, crash, kgdb) and security analysis tools (valgrind, address sanitizers, fuzzers)
- Familiarity with hardware-assisted security features (Intel SGX, AMD SEV, ARM TrustZone) and their relevance to kernel security
- Experience dealing with CVE remediation and automation
- Must be able to pass a background check
Bonus: Experience with kernel security projects or open-source kernel security contributions; hypervisor security and hypervisor-guest kernel interaction; hardware security modules (HSMs) or Trusted Platform Modules (TPMs); offensive security or penetration testing at kernel level.
