{"id":4004719,"url":"https://alion.io/job/swan-senior-platform-engineer-embedded-linux-security","title":"Senior Platform Engineer, Embedded Linux & Security","company":{"id":3787237,"name":"Swan","domain":"swan.tech","url":"https://alion.io/company/swan-6","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":175000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"QEMU","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Ansible","optional":true},{"name":"C++","optional":true},{"name":"CMMC","optional":true},{"name":"IAM","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-10T03:11:19Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T06:26:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Senior Platform Engineer, Embedded Linux & Security\nAbout the role\nThis role secures embedded Linux devices and the infrastructure behind them, from boot and provisioning through release, deployment, and cloud services. You'll join a small engineering team as a senior individual contributor, working across device security, DevOps, and backend development.\nWhat you'll do\nWork with and improve secure device provisioning and hardware-backed security, including fusing, signing, device identity, secure boot, attestation, and disk encryption.\n\nHelp define and harden software release processes from source to device.\n\nHelp design device authentication and authorization services.\n\nHarden device images and container runtimes, including mandatory access control such as AppArmor or SELinux.\n\nRun services with least privilege: systemd sandboxing, non-root accounts, and correct file ownership and permissions.\n\nSet SSH and firewall policy, and close debug paths such as UART, JTAG, and USB recovery.\n\nSecure web services on devices and in the cloud with TLS and mTLS, reverse proxies, and least-privilege service accounts.\n\nThreat model the platform, help scope pentests, and track vulnerabilities.\n\nPlan security for partner engagements and third-party integrations: define requirements, review interfaces and data flows, and set access boundaries.\n\nHelp shape fleet management and over-the-air update approaches, from device enrollment through deployment.\n\nBuild cloud pipelines for device data and identity, with least-privilege access scoped to each device.\n\nContribute to arm64 build and image pipelines, including cross-compilation, QEMU-based builds and tests, multi-arch containers, and rootfs customization.\n\nWrite and maintain backend code for device and infrastructure tooling.\n\nWhat you bring\n6+ years of experience across Linux systems, security, and infrastructure engineering.\n\nStrong working knowledge of hardware-backed security: secure boot chains, fused keys, TPMs and firmware TPMs, TEEs, attestation, and sealed storage.\n\nHands-on experience hardening Linux devices, containers, and services, with fluency in permissions, capabilities, and systemd.\n\nCurrent knowledge of how to secure edge and IoT devices, such as A/B partitions, read-only root filesystems, and verified boot.\n\nConfidence building and securing cloud infrastructure and CI/CD pipelines.\n\nSolid coding skills for tooling and backend services, and the ability to review code for security issues.\n\nExperience threat modeling systems and working with penetration testers or red teams.\n\nA bias toward action: delivering on priorities with urgency, and proactively finding, raising, and fixing issues with the team along the way.\n\nNice to have\nHands-on implementation of secure boot, key fusing, or attestation on embedded hardware\n\nHands-on implementation of secure OTA updates, including fleet update tools such as Mender\n\nML model security on edge devices: current risks and mitigations\n\nEmbedded pentesting or red team work: UART and JTAG access, firmware extraction, rollback and recovery-mode attacks\n\nCloud security depth: serverless, IAM policy design, key management, device identity\n\nInfrastructure as code with tools such as Terraform or Ansible\n\nC++, Python\n\nExperience in defense, export-controlled, or CMMC-regulated environments\n\nExperience in a small, fast-paced startup environment\n\nFamiliarity with corporate security and IT infrastructure","description_format":"text","description_chars":3438,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Defense AI","Drone AI"],"lifecycle":[{"event":"open","at":"2026-11-10T06:26:56Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:0","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/swan-senior-platform-engineer-embedded-linux-security","json_url":"https://alion.io/job/swan-senior-platform-engineer-embedded-linux-security.json","meta":{"generated_at":"2026-11-10T07:24:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17260,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3787237},"rest":"https://alion.io/mcp/rest/get_company?id=3787237"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswan-senior-platform-engineer-embedded-linux-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswan-senior-platform-engineer-embedded-linux-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswan-senior-platform-engineer-embedded-linux-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swan-senior-platform-engineer-embedded-linux-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswan-senior-platform-engineer-embedded-linux-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4004719}},{"tool":"search_jobs","arguments":{"company":"swan.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4004719},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}