Senior Enterprise Security Engineer, Linux

Senior Enterprise Security Engineer, Linux

Denver, CO or Long Beach, CA or SF Bay Area

Space is a war fighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

As a Senior Enterprise Security Engineer, Linux, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission. In this position, you will be responsible for defining and executing our enterprise Linux security strategy — from establishing centralized identity and access management across our Linux fleet to deploying configuration management  will work closely with infrastructure, IT, and engineering partners to ensure Linux is secured from the ground up while meeting compliance requirements.

You will regularly be faced with answering the question “How can we enable the business to operate on Linux with as little risk as necessary?”

As part of True Anomaly’s Enterprise Security team, you will have significant autonomy to design and own solutions for our most critical infrastructure. You will lead projects such as architecting a centralized identity solution for thousands of Linux hosts and codifying security baselines enforced through configuration management pipelines. This is an ideal role for a self‑starter who thrives on ownership, wants to leave their mark on an organization, and is energized by building something meaningful from the ground up.

This position requires the ability to obtain and maintain a security clearance.

• Lead enterprise Linux security strategy across on‑prem, cloud, and manufacturing environments.
• Architect and implement centralized Linux identity and access management, integrating with cloud native identity (e.g., Entra, Okta, Google).
• Own and deploy configuration management tooling (e.g., Puppet, Salt, Fleet) to enforce security baselines consistently across the Linux fleet.
• Develop, maintain, and enforce CIS Benchmark‑aligned or STIG‑based hardening standards for Linux systems.
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats across Linux infrastructure.
• Design and implement solutions for privileged access management, sudo policy enforcement, and host‑based access controls.
• Monitor and analyze security logs, audit trails, and telemetry from Linux systems; integrate with SIEM platforms to detect and respond to threats.
• Collaborate with cross‑functional teams to embed Linux security requirements into the system development lifecycle and infrastructure‑as‑code workflows.
• Proactively identify gaps in the current Linux security program and drive remediation.
• Assist in the development and maintenance of security policies, procedures, and guidelines specific to Linux environments.
• Provide subject‑matter expertise and guidance to internal stakeholders on Linux security best practices and compliance requirements.
• Stay current with the Linux threat landscape, kernel‑level vulnerabilities, and emerging security tooling.
• Support incident response and forensics across Linux environments.

• Minimum of 6 years of experience in information security, with a strong focus on Linux systems security engineering.
• Deep expertise in Linux internals, including kernel security mechanisms, name spaces, cgroups, SELinux/App Armor, and PAM, as well as managing userspace.
• Hands‑on experience architecting and deploying centralized Linux identity solutions, ideally with integration with cloud native identity.
• Proven experience with configuration management tools such as Ansible, Puppet, Chef, or Salt at enterprise scale.
• Strong understanding of Linux security hardening, including CIS Benchmarks, STIGs, and audit framework configuration.
• Experience integrating Linux systems with SIEM platforms and building detection logic for Linux‑based threats.
• Working knowledge of at least one scripting or programming language such as Python, Bash, Go, or Rust.
• Excellent analytical, problem‑solving, and communication skills.
• Ability to work independently and collaboratively in a fast‑paced environment.
• Experience handling on‑call duties and incident response in Linux environments.