Product Security Engineer, Operating System
Webflow
full-time
Posted on:
Location Type: Office
Location: Palo Alto • California • 🇺🇸 United States
Visit company websiteSalary
💰 $175,000 - $187,500 per year
Job Level
Mid-LevelSenior
Tech Stack
Linux
About the role
- Develop and maintain secure critical services for Linux system
- Implement secure boot chains from fused hardware keys, ensuring verified OS and data partitions with rollback protection
- Integrate OP-TEE to safeguard sensitive assets such as mTLS certificates and disk encryption keys
- Harden system services using least-privilege operations, systemd features, namespacing, and syscall filtering
- Build hardening templates and automation tools to streamline security boundary enforcement for developers
- Automate security validation processes within CI/CD pipelines
- Design and enforce device access controls for Linux systems
- Ensure sensitive operations and data remain protected while enabling developers to maintain security best practices
Requirements
- Experience contributing and shipping C/C++ code (or similar) to production
- Strong experience with Linux operating system internals and security mechanisms
- Hands-on expertise with secure boot and verified boot implementations
- Familiarity with Trusted Execution Environments (e.g., OP-TEE or similar)
- Proven track record of applying least-privilege principles and hardening root-level services
- Proficiency with systemd and sandboxing, including namespacing, privilege restrictions, syscall filtering, and other techniques
- Experience designing security tools, automation, and templates for developers
- Knowledge of device access control and Linux permissions management
- Solid understanding of CI/CD integration for security validation
- Experience with NVIDIA Orin or similar SoC platform preferred
- Expertise in software development, including code auditing
Benefits
- Salary Range: $175,000 – $187,500
- Health, dental, and vision insurance
- 401(k) with company match
- Paid time off and holidays
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
CC++Linuxsecure bootTrusted Execution EnvironmentssystemdsandboxingCI/CDcode auditingNVIDIA Orin
Soft skills
security best practicesautomationdesignintegrationcollaboration