Senior Enterprise Security Engineer, Linux

YOUR MISSION

As a Senior Enterprise Security Engineer, Linux, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission. In this position, you will be responsible for defining and executing our enterprise Linux security strategy — from establishing centralized identity and access management across our Linux fleet to deploying configuration management at scale. You will work closely with infrastructure, IT, and engineering partners to ensure Linux is secured from the ground up while meeting compliance requirements. You will regularly be faced with answering the question "How can we enable the business to operate on Linux with as little risk as necessary?"

As part of True Anomaly's Enterprise Security team, you will have significant autonomy to design and own solutions for our most critical infrastructure. In one project you might be architecting a centralized identity solution for thousands of Linux hosts, while in another you might be codifying security baselines and enforcing them through configuration management pipelines. You will be joining a fast-paced, challenging environment where your decisions and expertise will have direct, lasting impact on our security posture.

This is an ideal role for a self-starter who thrives on ownership, wants to leave their mark on an organization, and is energized by building something meaningful from the ground up.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

• Lead enterprise Linux security strategy across on-prem, cloud, and manufacturing environments.
• Architect and implement centralized Linux identity and access management, integrating with cloud native identity (e.g. Entra, Okta, Google)
• Own and deploy configuration management tooling (e.g. Puppet, Salt, Fleet) to enforce security baselines consistently across the Linux fleet.
• Develop, maintain, and enforce CIS Benchmark-aligned or STIG-based hardening standards for Linux systems.
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats across Linux infrastructure.
• Design and implement solutions for privileged access management, sudo policy enforcement, and host-based access controls.
• Monitor and analyze security logs, audit trails, and telemetry from Linux systems; integrate with SIEM platforms to detect and respond to threats.
• Collaborate with cross-functional teams to embed Linux security requirements into the system development lifecycle and infrastructure-as-code workflows.
• Proactively identify gaps in the current Linux security program and drive remediation.
• Assist in the development and maintenance of security policies, procedures, and guidelines specific to Linux environments.
• Provide subject matter expertise and guidance to internal stakeholders on Linux security best practices and compliance requirements.
• Stay current with the Linux threat landscape, kernel-level vulnerabilities, and emerging security tooling.
• Support incident response and forensics across linux environments.

Qualifications

• Minimum of 6 years of experience in information security, with a strong focus on Linux systems security engineering.
• Deep expertise in Linux internals, including kernel security mechanisms, namespaces, cgroups, SELinux/AppArmor, and PAM, as well as managing userspace
• Hands-on experience architecting and deploying centralized Linux identity solutions, ideally with integrating with cloud native identity.
• Proven experience with configuration management tools such as Ansible, Puppet, Chef, or Salt at enterprise scale.
• Strong understanding of Linux security hardening, including CIS Benchmarks, STIGs, and audit framework configuration.
• Experience integrating Linux systems with SIEM platforms and building detection logic for Linux-based threats.
• Working knowledge of at least one scripting or programming language such as Python, Bash, Go, or Rust.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Experience handling on-call duties and incident response in linux environments.

Preferred Qualifications

An ideal candidate will also have:

• Active TS/SCI clearance or ability to obtain and maintain security clearance.
• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Experience securing Linux in manufacturing or operational technology (OT) environments.
• Experience with cloud-hosted Linux fleets across Azure, AWS, or Google Cloud.
• Experience with infrastructure-as-code paradigms, Terraform, GitOps, and CI/CD pipelines.
• Familiarity with FedRAMP, CMMC, and NIST 800-53/800-171 frameworks and their application to Linux systems.
• Experience with privileged access management (PAM) tooling such as CyberArk, HashiCorp Vault, or similar.
• Familiarity with eBPF-based security tooling and runtime threat detection
• Experience working at a startup and/or in the defense industry.
  

Work Environment

• Candidates must reside and be available for hybrid onsite work in our offices in Denver, CO, Long Beach, CA, or SF Bay Area, CA
• This role operates in a fast-paced, high-stakes environment where rapid decision-making and adaptability are essential.
• On-call rotation participation, including after-hours participation, is required in this role.
• Must be comfortable working under pressure during active security incidents.
• High degree of autonomy and ownership over the Linux security program.

Direct access to leadership and opportunity to influence security strategy.
Compensation 

• Base Salary: Denver - $140,000 to $195,000, Long Beach - $145,000 to $205,000, SF Bay Area, CA - $160,000 to $225,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

What We Offer

• Competitive salary
• Opportunity to work on challenging, mission-critical security initiatives
• Professional development and certification support
• Collaborative culture with experienced security professionals
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.