Enterprise Security Engineer, Linux

True Digital Security, Inc.
Denver, United States of America
yesterday

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work
Languages
English
Experience level
Senior
Compensation
$ 89K

Job location

Denver, United States of America

Tech stack

Artificial Intelligence
Amazon Web Services (AWS)
Audit Trail
Azure
Bash
Cloud Engineering
Configuration Management
Computer Security
Continuous Integration
Linux
Identity and Access Management
Intrusion Detection and Prevention
Python
Linux kernel
Linux System Administration
Linux Security Modules
Machine Learning
Systems Development Life Cycle
Red Hat Enterprise Linux - RHEL
Ansible
Security Information and Event Management
Systems Integration
Scripting (Bash/Python/Go/Ruby)
Google Cloud Platform
Okta
Cyberark
Selinux
Git Flow
Infrastructure Automation Frameworks
Information Technology
Hashicorp
Operational Systems
CIS Benchmarks
Puppet
Terraform
Vulnerability Analysis
Go
Programming Languages

Job description

As a Senior Enterprise Security Engineer, Linux, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission. In this position, you will be responsible for defining and executing our enterprise Linux security strategy - from establishing centralized identity and access management across our Linux fleet to deploying configuration management at scale. You will work closely with infrastructure, IT, and engineering partners to ensure Linux is secured from the ground up while meeting compliance requirements. You will regularly be faced with answering the question "How can we enable the business to operate on Linux with as little risk as necessary?"

As part of True Anomaly's Enterprise Security team, you will have significant autonomy to design and own solutions for our most critical infrastructure. In one project you might be architecting a centralized identity solution for thousands of Linux hosts, while in another you might be codifying security baselines and enforcing them through configuration management pipelines. You will be joining a fast-paced, challenging environment where your decisions and expertise will have direct, lasting impact on our security posture.

This is an ideal role for a self-starter who thrives on ownership, wants to leave their mark on an organization, and is energized by building something meaningful from the ground up.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

  • Lead enterprise Linux security strategy across on-prem, cloud, and manufacturing environments.
  • Architect and implement centralized Linux identity and access management, integrating with cloud native identity (e.g. Entra, Okta, Google)
  • Own and deploy configuration management tooling (e.g. Puppet, Salt, Fleet) to enforce security baselines consistently across the Linux fleet.
  • Develop, maintain, and enforce CIS Benchmark-aligned or STIG-based hardening standards for Linux systems.
  • Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats across Linux infrastructure.
  • Design and implement solutions for privileged access management, sudo policy enforcement, and host-based access controls.
  • Monitor and analyze security logs, audit trails, and telemetry from Linux systems; integrate with SIEM platforms to detect and respond to threats.
  • Collaborate with cross-functional teams to embed Linux security requirements into the system development lifecycle and infrastructure-as-code workflows.
  • Proactively identify gaps in the current Linux security program and drive remediation.
  • Assist in the development and maintenance of security policies, procedures, and guidelines specific to Linux environments.
  • Provide subject matter expertise and guidance to internal stakeholders on Linux security best practices and compliance requirements.
  • Stay current with the Linux threat landscape, kernel-level vulnerabilities, and emerging security tooling.
  • Support incident response and forensics across linux environments., As an Electrical Technician, you will be responsible for assembling and testing spacecraft harnesses, setting up thermal vacuum chambers, and ensuring cleanroom protocols. You'll manage the product build process from parts to assemblies, handling engineering anomalies as they arise. Top Skills: AICleanroom ProtocolsEsdFodHarness FabricationSoftwareSpacecraftStakingThermal Vacuum ChambersTorquing True Anomaly

Requirements

  • Minimum of 6 years of experience in information security, with a strong focus on Linux systems security engineering.
  • Deep expertise in Linux internals, including kernel security mechanisms, namespaces, cgroups, SELinux/AppArmor, and PAM, as well as managing userspace
  • Hands-on experience architecting and deploying centralized Linux identity solutions, ideally with integrating with cloud native identity.
  • Proven experience with configuration management tools such as Ansible, Puppet, Chef, or Salt at enterprise scale.
  • Strong understanding of Linux security hardening, including CIS Benchmarks, STIGs, and audit framework configuration.
  • Experience integrating Linux systems with SIEM platforms and building detection logic for Linux-based threats.
  • Working knowledge of at least one scripting or programming language such as Python, Bash, Go, or Rust.
  • Excellent analytical, problem-solving, and communication skills.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Experience handling on-call duties and incident response in linux environments.

Preferred Qualifications

An ideal candidate will also have:

  • Active TS/SCI clearance or ability to obtain and maintain security clearance.
  • Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
  • Experience securing Linux in manufacturing or operational technology (OT) environments.
  • Experience with cloud-hosted Linux fleets across Azure, AWS, or Google Cloud.
  • Experience with infrastructure-as-code paradigms, Terraform, GitOps, and CI/CD pipelines.
  • Familiarity with FedRAMP, CMMC, and NIST 800-53/800-171 frameworks and their application to Linux systems.
  • Experience with privileged access management (PAM) tooling such as CyberArk, HashiCorp Vault, or similar.
  • Familiarity with eBPF-based security tooling and runtime threat detection
  • Experience working at a startup and/or in the defense industry.

Work Environment

  • Candidates must reside and be available for hybrid onsite work in our offices in Denver, CO, Long Beach, CA, or SF Bay Area, CA
  • This role operates in a fast-paced, high-stakes environment where rapid decision-making and adaptability are essential.
  • On-call rotation participation, including after-hours participation, is required in this role.
  • Must be comfortable working under pressure during active security incidents.
  • High degree of autonomy and ownership over the Linux security program.

Benefits & conditions

Be an Early Applicant In-Office Denver, CO, USA 140K-225K Annually Senior level In-Office Denver, CO, USA 140K-225K Annually Senior level Lead and execute Linux security strategy, architect identity solutions, manage configuration tools, and enforce security standards across environments. Collaborate on compliance and incident response in a high-stakes setting. The summary above was generated by AI

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

  • Be the offset. We create asymmetric advantages with creativity and ingenuity.
  • What would it take? We challenge assumptions to deliver ambitious results.
  • It's the people. Our team is our competitive advantage and we are better together., * Base Salary: Denver - $140,000 to $195,000, Long Beach - $145,000 to $205,000, SF Bay Area, CA - $160,000 to $225,000
  • Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
  • Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

What We Offer

  • Competitive salary
  • Opportunity to work on challenging, mission-critical security initiatives
  • Professional development and certification support
  • Collaborative culture with experienced security professionals
  • Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State., In-Office Denver, CO, USA 90K-105K Annually Junior 90K-105K Annually Junior Aerospace * Artificial Intelligence * Hardware * Machine Learning * Software * Defense * Manufacturing Develop and design harness assemblies for spacecraft, generating diagrams, managing technical studies, and ensuring production quality. Analyze designs and support testing efforts. Top Skills: CatiaNxSolidworks True Anomaly, In-Office Denver, CO, USA 125K-170K Annually Senior level 125K-170K Annually Senior level Aerospace * Artificial Intelligence * Hardware * Machine Learning * Software * Defense * Manufacturing Develop innovative spacecraft thermal designs, perform thermal analysis, coordinate with interdisciplinary teams, and support testing and operations. Top Skills: SolidworksThermal Desktop

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Apply for this position