Principal Linux Security Engineer (Fully Remote)

CIQ; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first culture

Open source culture

Job summary

CIQ is seeking a Linux security-focused engineer to own security errata across products and drive OS-level compliance.

You will build and apply security profiles (STIG/DIS), enhance OpenSCAP, and automate workflows with Ansible while prioritizing security and usability in HPC/AI environments.

Qualifications

• At least 4 years of Linux security experience.
• At least 2 years of Linux package building experience.
• Understanding of CVE scoring via CVSS and how build/config affects CVE exposure.
• Ability to build tools that accelerate security workflows and integrate with AI.
• Proven ability to create/write security advisories and integrate with security feeds.

Responsibilities

• Create and use security errata (CSAF, VEX, Advisories) for repos and security scanner feeds.
• Build STIG and DIS profiles, improve OpenSCAP, and write Ansible scripts to apply security profiles.
• Enhance proactive security with build flags, LKRG, and SELinux while maintaining usability.

Skills

Linux security

Linux packaging

CVSS/CVE scoring

Ansible

OpenSCAP

AI integration

Tools

OpenSCAP

Job description

• This role focuses on Linux security from a deep technical perspective, not just configuration.
• You will own security errata, CVE scoring, and OS-level compliance across CIQ products.

Key Responsibilities:

• Create and use security errata (CSAF, VEX, Advisories) for repos and security scanner feeds.
• Build STIG and DIS profiles, improve OpenSCAP, and write Ansible scripts to apply security profiles.
• Enhance proactive security with build flags, LKRG, and SELinux without sacrificing usability.

Required Experience:

• At least 4 years of Linux security experience and 2 years of Linux package building.
• Proven understanding of CVE scoring via CVSS and how build/configuration affects CVE affectedness.
• Ability to build tools that accelerate security workflows and integrate with AI.

Why CIQ:

• You will work on infrastructure that powers HPC, AI/ML, defense, and regulated industries.
• The company values builders and open source practitioners, with a remote-first culture.

CIQ

CIQ builds enterprise infrastructure that powers the world's most demanding workloads, from the operating system layer through AI infrastructure, high-performance computing, and cloud-native orchestration. They are the founding support and services partner of Rocky Linux, and their team is made up of builders, operators, and open source practitioners.