Infrastructure Security Engineer Security · Remote (US time zones) · Full-time Posted 2026-05-04

CYFR Technologies, Inc.; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

CYFR Technologies, Inc. is seeking a security-focused engineer to protect our encryption platform, focusing on hardware security, network defense, and supply chain integrity—from BIOS firmware to BGP routes.

You will design security policies, build IDS/IR capabilities, and oversee HSMs and attestation. The role demands 5+ years in infrastructure security, Linux security expertise, and automation skills in Python or Go.

Qualifications

• 5+ years of infrastructure or network security experience.
• Deep knowledge of Linux security including SELinux, seccomp, namespaces, and capabilities.
• Experience hardening bare-metal servers (BIOS, BMC, TPM, measured boot).
• Strong networking security skills: firewall policy design, DDoS mitigation, and BGP security.
• Experience with hardware security modules (HSMs) or TPM-based attestation.
• Ability to write automation in Python or Go.

Responsibilities

• Design and enforce network security policies across our data center fabric
• Build intrusion detection and response systems
• Conduct supply chain security assessments for hardware and software vendors
• Manage secrets infrastructure — HSMs, key ceremonies, hardware roots of trust
• Lead incident response for infrastructure-level security events

Skills

Linux security

Network security

Bare-metal security

HSM/TPM attestation

Automation (Python/Go)

Firewall design

BGP security

DDoS mitigation

Job description

Protect the physical and network infrastructure that underpins our encryption platform. This role focuses on hardware security, network defense, and supply chain integrity — from BIOS firmware to BGP routes.

Responsibilities

• — Design and enforce network security policies across our data center fabric
• — Build intrusion detection and response systems
• — Conduct supply chain security assessments for hardware and software vendors
• — Manage secrets infrastructure — HSMs, key ceremonies, hardware roots of trust
• — Lead incident response for infrastructure-level security events

Requirements

• — 5+ years of infrastructure or network security experience
• — Deep knowledge of Linux security — SELinux, seccomp, namespaces, capabilities
• — Experience hardening bare-metal servers — BIOS, BMC, TPM, measured boot
• — Strong networking security — firewall policy design, DDoS mitigation, BGP security
• — Experience with hardware security modules (HSMs) or TPM-based attestation
• — Ability to write automation in Python or Go

Nice to Have

• — Experience with physical data center security assessments
• — Background in hardware reverse engineering or firmware analysis