Senior Embedded Linux Security Engineer

ALTEN Technology USA; Foster City (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

ALTEN Technology USA, located in Foster City, CA, seeks an Embedded Linux Security Engineer to harden our next‑generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user‑space containment, and you will automate security pipelines in CI/CD while collaborating with manufacturing to provision devices securely at scale.

Responsibilities include designing Hardware Root of Trust and Secure Boot, implementing dm‑verity and encryption, developing a TEE

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related field.
• 6+ years of Embedded Linux development, board bring-up, BSP customization.
• 3+ years of device security in production hardware.
• Expertise with bootloader configurations (U-Boot, Barebox) and Linux kernel storage/security subsystems.

Responsibilities

• Design and implement Hardware Root of Trust and Secure Boot from bootloader to kernel.
• Implement dm-verity and encryption for read-only root filesystems and data at rest.
• Develop and integrate a TEE (e.g., OP-TEE) and Secure/Trusted Applications.
• Enforce user-space sandboxing with SELinux/AppArmor, cgroups, namespaces, and seccomp.
• Build automated cryptographic signing pipelines in CI/CD (GitLab CI, GitHub Actions) using HSMs or secure key vaults.
• Collaborate with manufacturing to securely provision devices and write end-of-line test software.
• Architect multi-slot boot recovery layouts to ensure fail-safe OTA updates.

Skills

C

Python

Bash

Embedded Linux

Yocto/Buildroot

Kernel security

U-Boot/Barebox

SELinux/AppArmor

cryptography

Education

Bachelor’s degree (CS/CE/EE)

Tools

U-Boot

Barebox

SELinux

AppArmor

dm-verity

Job description

ALTEN Technology USA, located in Foster City, CA, seeks an Embedded Linux Security Engineer to harden our next‑generation embedded Linux platform. You will bridge hardware security, kernel hardening, and secure user‑space containment, and you will automate security pipelines in CI/CD while collaborating with manufacturing to provision devices securely at scale.

Responsibilities include designing Hardware Root of Trust and Secure Boot, implementing dm‑verity and encryption, developing a TEE