Senior Security & Compliance Engineer - eLxr
Core
Lead security initiatives, compliance hardening, and audit readiness for eLxr, a Debian-based Linux distribution for mission-critical intelligent systems.
Role type
Senior Security & Compliance Engineer (Linux OS)
Builds
Secure OS images, installers, CI/CD pipelines, and entitlement systems for the eLxr distribution.
Domain
Embedded Linux / Cybersecurity / Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Linux security engineering, Debian derivatives, compliance frameworks (FIPS, STIG, CIS), Secure Development Lifecycle (SDL), secure boot, encryption tools, vulnerability management, CI/CD security, image generation, OS installer processes, CVE tracking, patching baselines
Preferred skills
Container security (Docker, Podman), entitlement systems, license management, large-scale Linux deployments, automation tools (Ansible, Puppet), open-source contributions
Technologies
Debian, OpenSSL, Ansible, Puppet, Docker, Podman
Responsibilities
Drive adherence to FIPS, STIG, CIS benchmarks, and SDL practices; Manage encryption tools and ensure cryptographic compliance; Implement and maintain segmentation, secrets management, certificate lifecycle, and least privilege access controls; Oversee generation of OS images and maintain secure OS installer workflows; Secure CI pipelines and entitlement backend systems; Monitor CVEs and manage vulnerability remediation; Implement and maintain secure boot processes; Develop and execute security testing strategies; Ensure security and compliance across web properties and entitlement portals
Seniority
Senior, hands-on IC
