Product Security Engineer - Operating System

San Carlos, CA (on-site)

• Develop and maintain secure critical services for Linux systems

• Implement secure boot chains using fused hardware keys with rollback protection

• Integrate OP-TEE to safeguard sensitive assets including mTLS certificates and disk encryption keys

• Harden system services using least-privilege operations, systemd features, namespacing, and syscall filtering

• Build hardening templates and automation tools to streamline security enforcement for developers

• Automate security validation processes within CI/CD pipelines

• Design and enforce device access controls for Linux systems

• Contribute and ship C/C++ code (or similar) to production environments