Systems Security Engineer - Bare-Metal & AWS

Blacksmith; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, Vision, Dental insurance.

401K match.

Unlimited PTO.

Annual offsite.

Early-exercise stock options.

12 weeks parental leave (US).

Job summary

Blacksmith is seeking a Systems Security Engineer to build and operate security controls for our bare-metal fleet, AWS control plane, application services, and the broader organization. This hands-on role involves hardening production systems, strengthening workload isolation, and remediating security issues in collaboration with the Security Lead.

You’ll translate priorities into engineering work, implement automated security controls, and ensure secure defaults across systems while balancing

Qualifications

• Strong Linux systems experience across the kernel, networking and storage stack.
• Practical understanding of security fundamentals including least privilege and defense in depth.
• Experience with virtualization and Linux isolation primitives: Firecracker, KVM, namespaces, and cgroups.
• Understanding of storage access controls, tenant isolation and secure data deletion.
• Knowledge of using eBPF for runtime security monitoring and observing process, file and network activity.
• Experience securing production AWS environments, particularly IAM, networking and audit logging.
• Ability to write and debug production code in Go, Rust, C, C++ or similar, and automate security changes via IaC.
• Strong comfort with agent-driven development and debugging, including reviewing coding agents' changes.
• Track record of turning ambiguous problems into practical engineering solutions and explaining tradeoffs.

Responsibilities

• Identify, prioritize and remediate security risks across the bare-metal fleet, AWS control plane, and application services.
• Strengthen tenant isolation, host hardening, network boundaries and access controls across the platform.
• Build and operate automated security controls for secure configuration, vulnerability remediation, IDS/IR, ensuring production reliability.
• Investigate and respond to security incidents, driving remediation through to completion.
• Partner with engineering and IT to establish secure defaults and practical security standards across systems and workflows.

Skills

Linux systems

Security fundamentals

Virtualization

Go/Rust/C/C++

AWS security

Agent-driven development

Debug production issues

Security incident response

Threat modeling

Tools

Firecracker

KVM

namespaces

cgroups

eBPF

AWS IAM

Job description

Blacksmith is seeking a Systems Security Engineer to build and operate security controls for our bare-metal fleet, AWS control plane, application services, and the broader organization. This hands-on role involves hardening production systems, strengthening workload isolation, and remediating security issues in collaboration with the Security Lead.

You’ll translate priorities into engineering work, implement automated security controls, and ensure secure defaults across systems while balancing