Senior Linux Software and Security Engineer - eLxr
Aptiv · Troy, MI · 3 mo ago
Information TechnologyFull-time
About the role
eLxr is a Debian-based Linux distribution engineered for performance, reliability, and enterprise-class security. We are expanding our core engineering team and seeking a Senior Linux Software & Security Engineer to help evolve and secure the platform.
Responsibilities
- Design, develop, and maintain security-related components across the eLxr distribution (C/C++, Python, or similar languages).
- Create, update, and optimize Debian packages.
- Contribute fixes and patches upstream to Debian when appropriate, following community guidelines.
- Maintain and enhance build scripts, packaging pipelines, and system tooling to support secure and reproducible builds.
- Monitor upstream projects, Debian security alerts, mailing lists, and community patches to keep packages updated and secure.
- Collaborate on architecture and design decisions affecting distribution direction, package quality, and security posture.
- Document processes, package changes, upstream contributions, and security fixes for internal and external stakeholders.
- Work closely with kernel, platform, infrastructure, and security engineering teams.
- Investigate, triage, reproduce, and remediate CVEs across the distribution; create, backport, test, and sign patches.
- Implement distribution-wide hardening aligned with STIG, CIS Benchmarks, and secure coding guidelines.
- Participate in FIPS-related development and validation activities.
- Develop and maintain secure boot, and trusted boot workflows (e.g., UEFI Secure Boot, TPM integration).
Requirements
- B.Sc. in Computer Science or related technical field.
- 12+ years of hands-on experience in Linux engineering, software development, or distribution maintenance.
- Familiarity with STIG, CIS, FIPS 140-x, NIST 800-53, or similar security frameworks.
- Experience with secure boot, UEFI firmware, TPM, key signing, and related boot-chain security.
- Knowledge of automated security scanning and vulnerability (CVE) management tools.
- Strong understanding of Linux internals; Debian experience preferred.
- Proficiency in a systems programming language (C/C++, Rust) and/or scripting language (Python, shell).
- Understanding of secure coding practices and general software security principles.
Key skills and competencies
- B.Sc. in Computer Science or related technical field.
- 12+ years of hands-on experience in Linux engineering, software development, or distribution maintenance.
- Familiarity with STIG, CIS, FIPS 140-x, NIST 800-53, or similar security frameworks.
- Experience with secure boot, UEFI firmware, TPM, key signing, and related boot-chain security.
- Knowledge of automated security scanning and vulnerability (CVE) management tools.
- Strong understanding of Linux internals; Debian experience preferred.
- Proficiency in a systems programming language (C/C++, Rust) and/or scripting language (Python, shell).
- Understanding of secure coding practices and general software security principles.
Qualifications
- B.Sc. in Computer Science or related technical field.
- 12+ years of hands-on experience in Linux engineering, software development, or distribution maintenance.
- Familiarity with STIG, CIS, FIPS 140-x, NIST 800-53, or similar security frameworks.
- Experience with secure boot, UEFI firmware, TPM, key signing, and related boot-chain security.
- Knowledge of automated security scanning and vulnerability (CVE) management tools.
- Strong understanding of Linux internals; Debian experience preferred.
- Proficiency in a systems programming language (C/C++, Rust) and/or scripting language (Python, shell).
- Understanding of secure coding practices and general software security principles.
Benefits
- Hybrid work model for workplace flexibility.
- Comprehensive health, dental, and life insurance.
- Short and long-term disability coverage.
- RRSP matching for financial security.
- Flexible time-off policies for work-life balance.
- Employee assistance program for mental well-being.
- Learning benefits, including a LinkedIn Learning subscription and seminars.
Schedule
Hybrid work model for workplace flexibility.
Pay
N/A