Job Description

We are seeking an experienced Staff Software Engineer with deep expertise in C/C++, Python, Kernel and system-level security engineering This role requires strong technical leadership, the ability to drive architectural decisions, and hands-on development of critical security components. The ideal candidate possesses extensive experience in secure system design, cryptography, and security protocols, along with an aptitude for mentoring teams and guiding best practices. Experience with compliance frameworks such as FIPS, NIAP/CC, or CIS is a strong advantage.

Lead the design and development of secure system using C/C++ and Python

• Architect and implement advanced security mechanisms, including:
  • Filesystem and storage encryption
  • Secure boot and trusted execution environments
  • Credential, key, and certificate lifecycle management
  • Network security protocols (IKE, TLS, SSH, etc.)
  • TPM2.0 device integration
• Own and drive end‑to‑end security architecture across system layers.
• Conduct threat modelling, risk analysis, and definition of mitigation strategies.
• Guide and mentor junior and mid‑level engineers on secure coding and architectural best practices.
• Collaborate with cross-functional teams on product security integration and hardening.
• Lead initiatives for AI adoption in engineering workflows—automation, static analysis, code generation, test coverage improvement, etc.
• Ensure compliance with regulatory and certification requirements (FIPS, NIAP, CIS benchmarks).
• Drive design reviews, security reviews, and contribute to long-term product roadmaps.

• Bachelor’s/Master’s degree in Computer Science, Engineering, or related field.
• 8+ years (Staff) of strong industrial experience in systems or security engineering.
• Deep expertise in C/C++ and Python for system-level development.
• Proven experience in:
  • Filesystem or full-disk encryption technologies
  • Secure boot, chain of trust, and firmware security
  • Cryptography fundamentals and secure key handling
  • Security protocols: IKE, TLS, SSH, IPsec
  • TPM2.0 device integration
• Strong understanding of Linux kernel internals, OS security, and low‑level system components.
• Strong debugging, performance analysis, and reverse‑engineering skills.
• Ability to work across teams and influence architecture and design at scale.