Platform Security Engineer

10 hours, 56 minutes ago
Full-time
Senior
DevOps and Infrastructure
Fly.io

Fly.io

Fly.io provides a flexible and powerful compute platform that enables developers to deploy application servers and databases close to their users, utilizing advanced features such as global Anycast load balancing, zero configuration private networking,...

Internet Software & Services
11-50
Founded 2016
$40M raised

Description

  • Own syscall filtering, process confinement, network confinement, and violation telemetry for Firecracker, Cloud Hypervisor, and platform host services.
  • Define and maintain host network isolation policies, including role-based connectivity rules, health checks, and killswitches.
  • Design and implement host-to-control-plane trust controls, host identity and attribution, authorization for host operations, and credential boundaries.
  • Own the host kernel patching cadence and SLA, including live kernel patching for urgent fixes.
  • Shape isolation controls for AI agent and sandbox workloads across fleets with varying trust levels.
  • Lead technical investigations into suspected guest escapes, anomalous host behavior, and kernel issues, and improve host-forensics playbooks.
  • Partner with Platform and Networking teams to ship security changes in shared systems.
  • Manage security scope and priorities surfaced through incidents, fleet operations, and ongoing platform needs.

Requirements

  • Experience shipping non-trivial Linux kernel, KVM/hypervisor, or BPF security work in production.
  • Production experience with seccomp filters, jailer or sandbox configuration, or VM-isolation hardening.
  • Deep expertise in either kernel/sandboxing or host networking, with the ability to work across adjacent domains.
  • Experience as a platform-security specialist within a security team and delivering work through cross-functional collaboration.
  • Ability to serve as the technical authority for low-level security work independently.
  • Strong asynchronous writing and written design communication skills.
  • Comfort working with coding agents and reviewing AI-generated low-level security code critically.
  • Ability to participate in on-call support for a globally distributed platform.
  • Experience running hardware virtualization on infrastructure you did not control, such as bare-metal cloud, nested virtualization, or customer-hosted systems (preferred).

Benefits

  • Fully remote, full-time senior position.
  • Competitive equity grants with a long exercise window.
  • Health care benefits.
  • Flexible vacation time with a minimum allowance.
  • Hardware and phone allowances.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Detection Engineer

SentinelOne 1001-5000 Internet Software & Services

SentinelOne is seeking a Senior Detection Engineer to develop and optimize production threat detections across endpoint, cloud, network, and third-party data sources for its AI-native cybersecurity platform.

AWS Azure CI/CD Cybersecurity Git Linux Python SIEM
8 hours, 56 minutes ago

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that enable its network security policy management platform to work across enterprise security devices and environments.

Cisco Juniper Network Security
11 hours, 11 minutes ago

Information Security Lead

Mama Money 201-500 Diversified Financial Services

Lead end-to-end security at Mama Money, a Cape Town-based fintech serving migrants and underserved communities, with a focus on securing APIs, partner integrations, cloud systems and regulatory controls.

AWS Bash Kubernetes OpenID Connect Penetration Testing Python Secrets Management SIEM Terraform
11 hours, 11 minutes ago

Manager Security Engineer, Operations

Fivetran 1001-5000 IT Services

Fivetran + dbt is hiring a remote US-based Manager of Security Operations, Incident Detection and Response to lead enterprise-wide threat detection, incident response, and security operations for its multi-tenant SaaS platform.

AWS Azure CrowdStrike Cybersecurity GCP JIRA Kubernetes Notion SIEM
2 days, 11 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers