Linux System Security Engineer
Role details
Job location
Tech stack
Job description
We are seeking a skilled Linux System Security Engineer to design, implement, and maintain security controls across our enterprise infrastructure. This role focuses heavily on securing on-premises environments, automating security processes, hardening Linux systems, and ensuring the overall integrity of critical infrastructure.
The ideal candidate brings deep Linux expertise, strong networking knowledge, and hands-on experience with open-source security tools and automation platforms., * Design, implement, and maintain security controls across Linux-based infrastructure and enterprise systems
- Conduct security audits, vulnerability assessments, and risk analyses
- Apply security patches and remediation measures to mitigate identified vulnerabilities
- Automate security and operational processes using Ansible and scripting languages
- Perform system hardening, including kernel tuning, service management, and secure configuration practices
- Monitor emerging cybersecurity threats and recommend proactive security improvements
- Collaborate with engineers and security professionals to assess risks and implement mitigation strategies
- Develop and maintain security documentation, standards, and procedures
- Support incident response, troubleshooting, and root cause analysis efforts
Requirements
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field
- 10+ years of experience in Security Engineering, Linux Systems Administration, Infrastructure Security, or a related role
- Strong understanding of cybersecurity principles, security architecture, and industry best practices
- Hands-on experience administering and securing Linux environments
- Experience with open-source technologies including:
- Git
- Elasticsearch/OpenSearch
- Wazuh
- Proficiency in scripting and automation using:
- Bash/Shell
- Python
- Strong understanding of networking concepts and protocols, including:
- TCP/IP
- DNS
- DHCP
- VPN technologies
- Firewalls
- Network segmentation
- Experience developing and maintaining Ansible playbooks and roles
- Excellent communication and collaboration skills
- Ability to work independently and within a team environment
- Passion for continuous learning and staying current on cybersecurity trends
- Ability and willingness to work onsite in Leesburg, VA five days per week
- U.S. Citizenship required with the ability to obtain and maintain a U.S. Government security clearance
Preferred Qualifications
- Experience with DNS technologies such as:
- BIND
- Unbound
- PowerDNS
- Experience with log aggregation and observability tools, including:
- Fluent Bit
- Fluentd
- Experience with virtualization platforms such as:
- VMware
- VirtualBox
- Proxmox
- Experience supporting BSD operating systems
- Experience working within highly regulated or security-focused environments
Benefits & conditions
We offer a highly competitive compensation package and comprehensive benefits, including:
- 6% company 401(k) match with immediate vesting
- Up to $7,000 annually in educational assistance
- 100% employer-paid medical coverage for employees
- 75% employer-paid medical coverage for dependents
- Medical, dental, life, and disability insurance
- Three weeks of paid vacation
- Two weeks of paid sick leave
- Eleven paid company holidays
Why Join Us?
- Work with cutting-edge open-source technologies and security platforms
- Collaborate with highly skilled engineers in a mission-driven environment
- Influence security strategy and infrastructure design
- Enjoy exceptional benefits and professional development opportunities
- Be part of a growing organization where your contributions make a direct impact