Senior Android VM Security Platform Engineer

Engg; Bellevue (WA); On-site; USD 191,000 - 253,000; Full time

Job summary

Engg in Bellevue, WA, is seeking a Senior Software Engineer to design, implement, and harden Android VMs running on crosvm. You will work across the virtualization stack from VMM to secure boot, delivering security-hardened production-grade Android VMs.

You will own end-to-end features, collaborate with platform and security teams, and define architecture and trust boundaries. Strong C/C++, Rust, and virtualization experience are required; US security clearance eligibility is noted.

Qualifications

• Strong systems programming in C/C++ and Rust with memory safety and performance considerations.
• Hands-on experience with crosvm or comparable VMM (QEMU/rust-vmm).
• Solid virtualization knowledge including KVM, VM lifecycle, and virtio.
• Android VM security fundamentals: sandboxing, verified boot, and trust model.
• Debugging across host and guest with kernel logs and tracing tools.

Responsibilities

• Design, implement, and harden Android VMs on crosvm across VMM, guest kernel, and Android framework layers.
• Bring up and boot Android guest images inside a VM, including kernel and bootloader.
• Harden the virtualization boundary and manage security risk across guest/host.
• Implement secure boot and chain-of-trust, including key management and rollback protection.
• Collaborate with platform, kernel, and security teams to resolve cross-cutting issues.
• Document architecture and security properties, trust boundaries, and design decisions.

Skills

C/C++

Rust

Low-level debugging

GDB

Git

KVM

VM virtualization

Android security

Threat modeling

Cross-platform

Tools

crosvm

QEMU

rust-vmm

seccomp/minijail

Job description

Engg in Bellevue, WA, is seeking a Senior Software Engineer to design, implement, and harden Android VMs running on crosvm. You will work across the virtualization stack from VMM to secure boot, delivering security-hardened production-grade Android VMs.

You will own end-to-end features, collaborate with platform and security teams, and define architecture and trust boundaries. Strong C/C++, Rust, and virtualization experience are required; US security clearance eligibility is noted.