Senior Defensive Security Engineer

THE OPPORTUNITY

Silvus is seeking a Senior Defensive Security Engineer – Embedded Systems who will report to the Director of Software Engineering on the Software Engineering team. The successful individual in this role will focus on protecting our embedded systems from potential threats by designing and implementing robust security measures, conducting security assessments, and ensuring compliance with industry standards. 

This position is based at Silvus Technologies’ headquarters in the heart of vibrant West Los Angeles, CA and is on a hybrid schedule; a minimum of 3 days onsite per week is expected. On-site days are Mondays, Wednesdays, and Thursdays.

The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.

 ROLE AND RESPONSIBILITIES

• Design and implement Linux-based security architectures for embedded systems, focusing on secure boot, and kernel hardening.
• Develop and enforce Linux security features, including iptables, netfilter, and auditd for intrusion detection and prevention.
• Conduct security assessments and audits of Linux-based embedded systems to identify and mitigate vulnerabilities.
• Integrate Linux security best practices into the development lifecycle (DevSecOps), emphasizing secure coding and configuration management.
• Manage vulnerabilities in Linux-based embedded systems, including timely patching and kernel updates.
• Train teams on Linux security practices, including privilege management, file system permissions, and container security.
• Participate in incident response planning and execution for Linux-based embedded systems.
• Implement Linux-native encryption and authentication mechanisms (e.g., dm-crypt, OpenSSL, PAM) for secure communications.

REQUIRED QUALIFICATIONS

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (e.g., Mathematics, Computer Engineering).
• Minimum 5 years in cybersecurity, with at least 2 years in defensive security roles focused on Linux-based systems.
• Expertise in Linux network security, secure coding, or embedded systems security.
• Coding/scripting in C/C++, Python, Bash, or assembly for Linux environments.
• Familiarity with Linux security tools like Auditd, Lynis, or vulnerability scanners.
• Security Clearance: Active U.S. Government SECRET clearance or the ability to obtain one within 12 months of hire.
• NOTE - Must be a U.S. Person (U.S. Citizen, or U.S. Permanent Resident) due to clients under U.S. federal contracts

PREFERRED KNOWLEDGE, SKILLS AND ABILITIES

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• One or more of the following certifications: CISSP, CISM, GIAC Security Expert (GSE), CompTIA Security+, or Linux-specific (e.g., LFCS, RHCE).
• Hands-on experience implementing Linux security controls, such as SELinux, AppArmor, or iptables, and conducting security assessments.
• Proficiency in Linux security frameworks, such as CIS Benchmarks, NIST SP 800-53, or STIGs.
• Broad experience with Linux secure development lifecycle (SDL) practices.
• Knowledge of Linux threat intelligence and threat modeling.
• Familiarity with Linux container security (e.g., Docker, Podman) and cloud environments.
• Strong communication skills to explain Linux security concepts to technical and non-technical audiences.
• Collaborative teamwork with cross-functional groups.
• Experience securing resource-constrained Linux-based embedded systems.
• Understanding of real-time Linux systems and their security implications.
• Knowledge of Linux hardware security integration, such as TPM or Secure Enclave.
• Demonstrated experience designing secure Linux communication systems with encryption, authentication, and key management.
• Familiarity with mobile ad-hoc networking security on Linux platforms.

WORKING CONDITIONS & PHYSICAL REQUIREMENTS

• Office environment.
• While performing the duties of this job, the employee is required to do the following:
  • Lift equipment up to 20 lbs. for the set-up of demonstrations and testing.
  • Perform bending and reaching movements to place items on lower and higher shelves.
  • Walking/Moving in the labs.

#techcareers