Staff Kernel Security Engineer

Job overview

The Staff Kernel Security Engineer role is listed in San Francisco, CA, with compensation of $215,000–$260,000 per year plus bonus. Crusoe builds and operates AI infrastructure and describes its mission as accelerating the abundance of energy and intelligence. The engineer strengthens the security of Linux kernel and operating system components underpinning Crusoe’s AI cloud. The role develops and applies hardening, vulnerability response, and isolation measures while working with engineering and security teams to protect systems without unduly affecting performance.

What you'll do

• Implement kernel security enhancements and configuration hardening
• triage CVEs for severity and exploitability
• enforce access controls and secure boot
• establish CI guardrails and fuzzing coverage
• research kernel, driver, and OS vulnerabilities and develop mitigations
• backport upstream fixes
• establish secure coding practices and conduct security-focused code reviews
• use and develop auditing, fuzzing, static-analysis, and dynamic-analysis tools
• support incident response and root-cause analysis
• audit and harden Cloud Hypervisor components
• collaborate across engineering and security operations
• provide technical guidance and mentorship.

What we're looking for

Skills & competencies

staff kernel security engineer

linux kernel security

cve triage

kernel hardening

cloud hypervisor

vulnerability research

secure development

ai infrastructure

san francisco ca

crusoe

$215k–$260k plus bonus

Work arrangement

• Weekend coverage required

Benefits & perks

• Equity and restricted stock units
• paid time off and holidays
• health, dental, and vision insurance
• HSA contributions
• paid parental leave
• life and disability insurance
• professional development and tuition reimbursement
• wellness support
• commuter benefits
• cell phone stipend
• 401(k) match up to 4%
• volunteer time off
• travel insurance
• daily meals allowance.

Why this role

The posting sets first-90-day goals for owning kernel CVE triage and shipping a backported fix, and first-year goals for a defined response SLA and enforced hardening baseline. Travel is required according to the listing’s structural facts.

About the employer

Crusoe is hiring for this role. Industry: Engineering Services. Sector: 54.