Linux Security Developer

Job Title: Linux Security Developer

• Experience: 5–12 Years
• Employment Type: Full-Time
• Location: [Hyderabad ]

Job Summary

We are seeking a skilled and security-focused Linux Security Developer to design, develop, and maintain advanced security features for our embedded Linux platforms. You will play a key role in securing SoC-based systems by working across the full stack—from kernel to user space—ensuring robust boot processes, secure runtime environments, and protection against evolving threats.

This role involves close collaboration with kernel, BSP, firmware, and DevOps teams to deliver secure, reliable, and compliant systems across diverse embedded applications.

Key Responsibilities

• Develop and integrate security features into Linux kernel and user space, including SELinux, AppArmor, seccomp, IMA/EVM, and dm-verity.
• Implement and maintain Secure Boot, Trusted Execution Environments (TEE), and key management systems (e.g., TPM, OP-TEE).
• Analyze, triage, and patch vulnerabilities (CVEs); contribute to threat modeling and security incident response.
• Enhance access control, sandboxing, isolation, and container security at the kernel level.
• Support secure firmware update flows and storage encryption strategies.
• Collaborate with QA and DevOps teams to integrate security scanning, static analysis, and fuzz testing into CI/CD pipelines.
• Conduct code reviews, write technical documentation, and define secure coding and development standards.

Required Skills

• Strong experience with Linux kernel development and embedded system security.
• In-depth knowledge of Linux hardening techniques: namespaces, cgroups, LSMs (e.g., SELinux, AppArmor), KASLR, ASLR.
• Hands-on experience with IMA/EVM, dm-verity, cryptsetup, keyrings, and filesystem-level protections.
• Proficient in C, Bash, and Python; familiarity with assembly language and GCC/Clang toolchains is a plus.
• Experience with Secure Boot implementations (UEFI, FIT image signing) and TPM/OP-TEE integration.
• Strong understanding of vulnerability management, CVE analysis, and Linux patching workflows.

Preferred Skills

• Familiarity with secure software lifecycle practices and threat modeling frameworks (e.g., STRIDE, DREAD).
• Experience with custom Linux distributions using Yocto or Buildroot.
• Exposure to virtualization and container technologies such as KVM, Xen, Docker, LXC, or Kata Containers.
• Background in industries with high security and compliance requirements such as automotive, medical devices, or industrial systems.
• Understanding of compliance and security standards (e.g., FIPS, CIS Benchmark, GDPR, ISO 21434).

Education

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Electronics, or a related technical field.

If you are looking for job change share your updated resume to vagdevi@semi-leaf.com

“Your reference would be greatly appreciated”

Job Type: Full-time

Pay: Up to ₹6,000,000.00 per year

Experience:

• SELinux, AppArmor, IMAEVM, dm-verity, cryptsetup, keyrings: 1 year (Required)
• • Proficiency in C, Bash, and Python: 1 year (Required)
• Bootflow (UEFI/Secure Boot, FIT image signing, TPM/OP-TEE: 1 year (Required)
• working on automotive, medical, industrial-grades is a plus.: 1 year (Required)

Work Location: In person