{"id":1893899,"url":"https://alion.io/job/preciseframe-senior-software-security-engineer-linux-appliances","title":"Senior Software Security Engineer (Linux Appliances)","company":{"id":3900465,"name":"Preciseframe","domain":"preciseframe.com","url":"https://alion.io/company/preciseframe","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":8500,"max":12000,"currency":"SGD","period":"month","gross":true,"usd_annual":112596},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FFmpeg","optional":false},{"name":"GStreamer","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"QEMU","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"Company Overview\nPreciseFrame is a Singapore deep tech company revolutionizing video storage and streaming. Its PreciseFlow™ engine reduces camera network data by up to 90% while preserving quality, running on standard CPUs without GPUs, integrating seamlessly with existing video systems.\nJob Summary\nOwn the security architecture and secure platform engineering of appliance products, focusing on software security to protect devices and intellectual property. Collaborate on media streaming integration and work hands-on with appliance hardware. Reports to R&D Manager.\nResponsibilities\nDesign and maintain appliance trust architecture including UEFI Secure Boot key hierarchy, signing workflows, measured boot, and TPM-anchored secrets to ensure device integrity\nManage TPM 2.0 in production by creating keys, defining PCR measurements and policies, implementing sealed storage, remote attestation, and integrating LUKS/Clevis disk encryption\nHarden Linux platforms end to end by configuring kernel lockdown, implementing IMA appraisal policies, enforcing AppArmor confinement, applying sysctl and module blacklists, and managing audit and sandboxing systems\nOwn and improve the secure build pipeline through hardened kernel builds, signed OS image assembly, reproducibility practices, and cryptographic verification at every stage\nImplement applied cryptography workflows correctly, including RSA-PSS and OAEP signature schemes, AES-GCM authenticated encryption, canonical serialization for signed documents, and key ceremony management including compromise response\nDevelop verification infrastructure using QEMU/OVMF/swTPM boot testing, self-tests with negative controls, and fail-closed validation gates to ensure security robustness\nContribute to threat modeling by defining adversaries and trust boundaries, documenting architectural decisions to defend security invariants\nDevelop and debug media streaming stack components (RTSP, ONVIF, media pipelines) as required by product needs\nWrite operator-grade tooling in bash, Python, and C, and produce comprehensive run books to support operations\nRequired competencies and certifications\nMinimum 5 years of security-focused systems engineering experience on Linux platforms\nExpertise in UEFI Secure Boot including key hierarchy (PK/KEK/db), image signing, and enrollment workflows\nHands-on experience with TPM 2.0 covering key attributes, PCR policies, sealing, and attestation concepts (EK, AK, quotes)\nPractical experience with disk encryption in production environments using LUKS2, cryptsetup, and TPM binding (Clevis or equivalent)\nProficient in Linux hardening techniques including mandatory access control (AppArmor or SELinux), kernel lockdown, IMA/EVM or comparable integrity frameworks, and audit systems\nApplied cryptography skills to implement, review, and detect misuse of asymmetric signatures, authenticated encryption, and verification chains\nExperience in threat modeling and secure design review processes\nDeep understanding of Linux internals including boot process (UEFI, bootloader, kernel, init), systemd, udev, initramfs, custom image building, and kernel configuration\nExpert-level bash scripting and strong Python programming skills; proficiency in C for systems programming\nWorking knowledge of streaming protocols (RTSP/RTP), ONVIF standards, and media frameworks such as GStreamer or FFmpeg\nPreferred competencies and qualifications\nExperience with anti-tamper and reverse engineering resistance techniques including encrypted payloads, secure loaders, and self-integrity checks\nFamiliarity with airgapped or no-update channel deployment models and associated operational discipline\nKnowledge of secure provisioning at scale, per-unit key management, reproducible builds, and supply chain security awareness\nExperience integrating with Video Management Systems (VMS) or Network Video Recorders (NVR) and performance engineering\nOther Information\nLocation Full time, permanent position based at PreciseFrame’s office in Singapore.\nWork Eligibility Applicants must be eligible to work in Singapore.\nHow We Work We operate as a small, high-trust team with high ownership. Architecture decisions are documented and reviewed. Our security-critical units require rigorous quality and traceability to prevent compromises that would necessitate hardware recalls.\nSkills\nSecurity Architecture, Security Administration, Negative Testing, Product Requirements, validation protocols, Cryptography, Trust Administration, PCR, TPM, Streaming Media, Threat Modeling","description_format":"text","description_chars":4537,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-05T06:28:00Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.799,"p_room":0.9,"age_days":11,"expected_fill_days":24,"reasons":["seen:11","win:mid"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":112596,"is_top_pay":false},"html_url":"https://alion.io/job/preciseframe-senior-software-security-engineer-linux-appliances","json_url":"https://alion.io/job/preciseframe-senior-software-security-engineer-linux-appliances.json","meta":{"generated_at":"2026-10-16T22:08:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3542,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3900465},"rest":"https://alion.io/mcp/rest/get_company?id=3900465"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpreciseframe-senior-software-security-engineer-linux-appliances"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpreciseframe-senior-software-security-engineer-linux-appliances"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpreciseframe-senior-software-security-engineer-linux-appliances"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/preciseframe-senior-software-security-engineer-linux-appliances\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpreciseframe-senior-software-security-engineer-linux-appliances"}]}