Security Certification Engineer

SUSE; Spain (TX); On-site; USD 60,000 - 84,000; Full time

Job summary

SUSE is seeking a Security Certification Engineer to drive end-to-end security certification projects for Linux-based products, leveraging KVM virtualization and cloud-native stacks.

You will build certified configurations, develop AI-assisted automation tools, and translate NIAP/BSI/NIST requirements into engineering parameters. Collaboration with cross-functional teams and strict compliance are essential to the role.

Qualifications

• 5+ years of computing experience in software product development, academia, or FOSS communities.
• Excellent knowledge of Linux OS, KVM, and containerized virtualization.
• Proficiency in scripting (Bash, Python) and Ansible.
• Experience with Jira and Bugzilla and AI-assisted productivity workflows.
• Strong familiarity with security hardening and cryptographic standards (OVAL, XCCDF, SCAP, STIGs).
• Good written and spoken English.
• Bonus: C programming and knowledge of physical security concepts.

Responsibilities

• Certified configurations: Build and test certified product configurations (KVM-based).
• Certification automation & AI: Develop AI-assisted automation tools for certs and testing.
• Translate certification bodies' requirements into engineering parameters.
• Maintain certification testing workflows within CI/CD pipelines.
• Coordinate with production engineering on findings and mitigations.

Skills

Linux

KVM

Containerization

Bash

Python

Ansible

English

Security concepts

Cryptographic standards

Documentation

Tools

Jira

Bugzilla

Job description

About Us

SUSE is a global leader of enterprise open source software. By transforming community innovations into secure, sovereign and AI-ready solutions, SUSE empowers customers to escape vendor lock-in and regain control of their IT destiny. Through industry-leading Linux, Kubernetes, Edge and AI infrastructure solutions, SUSE delivers the flexibility to innovate everywhere—from the data center to multi-cloud and out to the edge. Only SUSE also manages many Linux and Kubernetes distributions. At SUSE, Choice Happens because we prioritize community, interoperability and relentless innovation. Discover how we power mission-critical resilience at www.suse.com.

Security Certification Engineer

Job Description

Driving the technical execution of end-to-end security certification projects, ensuring our enterprise portfolio maintains high-assurance compliance. Leveraging deep technical expertise in Linux OS, cloud-native virtualization, KVM-based hypervisors, and containerized hyperconverged infrastructure (HCI), to build certified product configurations, develop AI-enabled automation tools, and bridge the gap between complex software architectures and strict certification evaluation requirements.

Responsibilities

• Certified Configurations: Build and rigorously test certified product configurations (specifically focusing on KVM virtualization based architectures), driving their compliance throughout the project cycle.


• Certification Automation & AI: Develop and maintain robust frameworks and AI-assisted automation tools for continuous security certifications and testing requirements.


• Engineering Requirements: Maintain and translate complex technical requirements defined by certification bodies (e.g., NIAP, BSI, NIST) into actionable engineering parameters.


• Testing Rigor: Maintain certification testing requirements and execution workflows, integrating them into automated environments and CI/CD pipelines.


• Cross-Functional Coordination: Coordinate closely with production engineering teams to implement architectural recommendations, mitigation strategies, and security findings from external certification labs.

Candidate Profile

• Experience: 5+ years of total computing experience in software product development industry, academia, or FOSS communities.


• Domain Expertise: Excellent technical knowledge of Linux operating systems, hypervisor technology stacks (e.g., KVM), and containerized virtualization.


• Automation & Scripting: Excellent proficiency in scripting languages (Bash, Python) and configuration management (Ansible).


• Tooling & Workflows: Solid experience with standard tracking systems (Jira, Bugzilla) and a strong capability to build, support, and operate within AI-assisted productivity workflows.


• Security Acumen: Strong familiarity with security hardening, cryptographic standards, and compliance frameworks (OVAL, XCCDF, SCAP, STIGs).


• Communication: Good command of spoken and written English, with strong skills in maintaining meticulous technical compliance documentation.


• Bonus Skills: Programming and debugging experience in C; familiarity with physical security concepts (data centers, CCTV, access control lock systems).

This position is subject to a background check(s), including criminal, credit, and/or employment references. The candidate is required to complete the background check(s) once an offer has been accepted. This will be conducted by SUSE’s external provider, where legally permitted.

As part of our commitment to pay transparency, we are sharing the expected total salary range associated with this role. This range includes the base salary and any applicable target bonus opportunity, subject to the terms of the relevant compensation plans and company policies. Please note that the salary range provided is intended only as a guideline. Individual offers may vary based on objective, non-discriminatory factors, including experience, skills, qualifications, geographic location, internal equity, and budget considerations. In addition to competitive compensation, we are proud to offer an attractive benefits package. Pay Range for Italy: €52,000.00 - €73,000.00

SUSE is a dynamic environment that is evolving rapidly, thus requiring agility, strong entrepreneurship and an open mind.

This is a compelling opportunity for the right person to join us as we continue to scale and prosper.

We empower you to be bold, driving your career to create the future you want. We celebrate and reward your achievements.

We give you the freedom to be yourself. You will work in a global community of unique individuals – like you – with different backgrounds, talents, skills and perspectives. A truly open community where everyone is welcome, has a voice and is encouraged to reach their full potential regardless of age, gender, race, nationality, disability, sexual orientation, religion, or any other characteristics.

SUSE Values

SUSE's culture is centered on four key values - Choice, Community, Trust, and Innovation - which are deeply integrated with our open source ethos. SUSE fosters a diverse and inclusive environment where our people are encouraged to be themselves.

Choice

• We are continuously making choice happen


• We are accountable for our choices


• We never get complacent

Community

• Nobody is smarter than everybody


• We embrace diversity of thought


• We are \"open source first, upstream first\" where collaboration benefits all

Trust

• We are trusted to deliver with integrity


• We offer trust by default, and do not wait for it to be earned


• We foster an environment where everyone trusts each other

Innovation

• We foster a culture of experimentation, and embrace change by challenging the norm


• We are committed to continuous improvement, creativity and adaptability


• Ideas are great, but without execution they are just ideas