Linux Lead/Security

Shain Associates; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Shain Associates is seeking a senior Linux security engineer to drive our defense-in-depth strategy across on-prem and cloud infrastructure.

The role focuses on building hardened Linux baselines, leading red-team informed assessments, and developing automated checks to validate configurations, access, and patching at scale. You will partner with security operations and engineering teams to strengthen detections and responses.

Qualifications

• Five or more years of hands-on experience securing and engineering enterprise Linux environments.
• Strong offensive security or red-team background with adversary simulation against Linux.
• Deep knowledge of Linux hardening, privilege management, authentication, and access controls.
• Experience performing vulnerability validation, penetration testing, threat modeling, and remediation planning.
• Proficiency with scripting or automation to assess configurations and enforce baselines.
• Ability to analyze system logs, process behavior, network activity, and telemetry during investigations.
• Understanding of container, virtualization, and cloud-based Linux security in enterprises.
• Strong communication and collaboration skills with stakeholders.

Responsibilities

• Continue advancements in the firm’s Linux security strategy by creating resilient controls across enterprise infrastructure
• Lead adversary-informed assessments of Linux systems to stay ahead of emerging risks to critical business platforms
• Design hardened Linux build standards that reduce attack surface while supporting reliable, high-performance technology operations
• Develop automated checks and remediation workflows that continuously validate configuration, access, and patching practices at scale
• Partner with security operations and infrastructure teams to investigate Linux-focused threats and strengthen detection and response playbooks
• Analyze privilege paths, authentication flows, and service configurations to identify opportunities for containment and least-privilege enforcement
• Advise engineering teams on secure deployment patterns for Linux workloads across data center and cloud-based environments
• Create practical security guidance, threat models, and technical documentation that help teams make informed infrastructure decisions
• Stay ahead of evolving threats to Linux environments by translating threat intelligence into proactive hardening priorities

Skills

Linux security

Red-team

Linux hardening

Vulnerability testing

Threat modeling

Penetration testing

Automation scripting

Log analysis

Cloud security

Job description

• Continue advancements in the firm’s Linux security strategy by creating resilient controls across enterprise infrastructure
• Lead adversary-informed assessments of Linux systems to stay ahead of emerging risks to critical business platforms
• Design hardened Linux build standards that reduce attack surface while supporting reliable, high-performance technology operations
• Develop automated checks and remediation workflows that continuously validate configuration, access, and patching practices at scale
• Partner with security operations and infrastructure teams to investigate Linux-focused threats and strengthen detection and response playbooks
• Analyze privilege paths, authentication flows, and service configurations to identify opportunities for containment and least-privilege enforcement
• Advise engineering teams on secure deployment patterns for Linux workloads across data center and cloud-based environments
• Create practical security guidance, threat models, and technical documentation that help teams make informed infrastructure decisions
• Stay ahead of evolving threats to Linux environments by translating threat intelligence into proactive hardening priorities

What’s required

• Five or more years of hands-on experience securing and engineering enterprise Linux environments in complex production settings
• Strong offensive security or red-team background, including hands-on exploitation, attack-path analysis, and adversary simulation against Linux systems
• Deep knowledge of Linux hardening, privilege management, authentication, access controls, logging, and secure configuration practices
• Experience performing vulnerability validation, penetration testing, threat modeling, and remediation planning for Linux infrastructure
• Proficiency with scripting or automation to assess configurations, enforce baselines, and support repeatable security operations
• Ability to analyze system logs, process behavior, network activity, and endpoint telemetry during security investigations
• Understanding of container, virtualization, and cloud-based Linux security considerations in enterprise environments
• Strong communication and collaboration skills, with the ability to influence infrastructure, security, and engineering stakeholders