We are seeking a highly skilled and motivated Linux Security Developer with a deep understanding of Linux internals and embedded security. The ideal candidate will be responsible for designing, developing, and integrating advanced security features into the Linux kernel and user space, contributing to secure system architecture, threat mitigation, and vulnerability management.
This role involves close collaboration with cross-functional teams including Kernel, BSP, and DevOps to ensure end-to-end security coverage across embedded platforms.
Key Responsibilities :
- Design, develop, and integrate security features into the Linux kernel and user space (e.g., SELinux, AppArmor, seccomp, IMA / EVM, dm-verity).
- Implement and manage secure boot, trusted execution environments (TEE) such as OP-TEE, and key management services using TPM and other hardware security modules.
- Analyze and patch known vulnerabilities (CVEs), support vulnerability remediation, and security hardening across systems.
- Conduct threat modeling, risk assessments, and provide input into security architecture design.
- Actively participate in security incident response, root cause analysis, and remediation planning.
- Collaborate closely with Kernel, BSP (Board Support Package), and DevOps teams to embed security best practices into build, CI / CD pipelines, and runtime environments.
- Contribute to security compliance efforts (e.g., secure coding standards, security checklists, internal audits).
- Maintain and improve internal tools and frameworks used for security validation and testing.
Required Skills & Experience :
5-12 years of hands-on experience in Linux kernel development and system-level programming.Proven expertise in implementing and managing Linux security modules such as :SELinux, AppArmorseccomp, IMA / EVMdm-verity, AuditdStrong experience with Trusted Platform Module (TPM), OP-TEE, and secure boot mechanisms.Solid knowledge of Linux internals, system calls, and memory management.Experience working with CVEs, patching vulnerabilities, and security incident response.Familiarity with build systems (Yocto, Buildroot), cross-compilation, and embedded Linux toolchains.Good programming skills in C / C++, and scripting in Bash / Python.Good-to-Have / Preferred Skills :
Experience with container security (e.g., Docker, Kubernetes security policies).Familiarity with hardware security modules, secure storage, and cryptographic APIs.Exposure to security certifications (e.g., FIPS, Common Criteria, ISO 27001).Knowledge of DevSecOps practices and security automation tools.Contributions to open-source Linux security projects are a plus.(ref : hirist.tech)