Platform Software Security Engineer, Air Defense

Required

• 4+ years of professional software engineering with a security focus on embedded Linux systems.
• Hands-on experience implementing a secure boot chain: code signing, chain of trust, UEFI Secure Boot or an equivalent vendor secure boot implementation.
• Practical cryptographic engineering skills: PKI and certificate hierarchies, HSM or PKCS#11-backed signing, key lifecycle management, and full-disk encryption.
• Strong Linux internals knowledge, particularly in patching, boot flow, kernel and initrd, systemd, privilege boundaries, and filesystem and device access control.
• Proficiency in C, C++, or Rust, plus the ability to work fluently in shell.
• Experience building or modifying embedded Linux system images—Yocto, Buildroot, or NixOS. Comfort working at the layer where OS configuration meets hardware bring-up.
• Practical hardening and vulnerability-management experience on real systems: attack-surface reduction, CVE triage on a deployed fleet, and live patching strategies that don't break the product.
• Ability to work hands-on with hardware—comfortable at a lab bench interfacing with compute boards, serial consoles, and firmware tooling.
• Ability to explain a security decision to engineers who need to implement it, and to a program stakeholder who needs to accept the residual risk.
• US person status required. Active US Secret clearance, or a previously granted Secret clearance eligible for reactivation.