Senior Linux Security Engineer — High-Scale Infrastructure

Blocket AB; San Francisco (CA); Hybrid; USD 180,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Vision insurance

Dental insurance

Unlimited PTO

Job summary

Blocket AB in San Francisco is seeking a Security Engineer focused on Linux infrastructure security to safeguard large-scale, untrusted workloads while maintaining low latency. You will design defense-in-depth for sandboxed and microVM systems, implement real-time threat detection, and ensure compliance with SOC 2, ISO 27001, and GDPR in a fast-growing startup.

This hybrid role requires 5+ years in production security, experience with container security and kernel-level controls; compensation is

Qualifications

• 5+ years of experience securing production infrastructure.
• Deep hands-on experience with Linux security primitives such as seccomp, eBPF, and namespaces
• Experience securing distributed systems at scale
• Familiarity with compliance frameworks including SOC 2, ISO 27001, and GDPR
• Comfortable working close to the system; kernel-level security experience is a plus

Responsibilities

• Secure high-scale infrastructure executing untrusted workloads
• Design and implement defense-in-depth security for sandboxed and microVM-based systems
• Build real-time threat detection across large numbers of concurrent environments
• Apply Linux security primitives to enforce isolation and runtime protection
• Ensure compliance with enterprise security standards while maintaining low-latency performance

Job description

Blocket AB in San Francisco is seeking a Security Engineer focused on Linux infrastructure security to safeguard large-scale, untrusted workloads while maintaining low latency. You will design defense-in-depth for sandboxed and microVM systems, implement real-time threat detection, and ensure compliance with SOC 2, ISO 27001, and GDPR in a fast-growing startup.

This hybrid role requires 5+ years in production security, experience with container security and kernel-level controls; compensation is