Staff Product Security Engineer, Secure Design (Kernel and Virtualization)

A tenant escape at a cloud provider is the worst day the company has, and this role exists to make sure it does not happen. Security ownership of a hypervisor stack.

The work is systematic rather than reactive: threat models of the virtualisation stack, shared rubrics for impact and likelihood, and defence-in-depth mitigations you then drive to implementation across kernel, virtualisation and provisioning teams.

US remote, C and Rust, with KVM named. Deep systems and kernel security experience is genuinely required.