Principal Linux Security Engineer; Fully Remote

• This role focuses on Linux security from a deep technical perspective, not just configuration.
• You will own security errata, CVE scoring, and OS-level compliance across CIQ products.

Key Responsibilities:

• Create and use security errata (CSAF, VEX, Advisories) for repos and security scanner feeds.
• Build STIG and DIS profiles, improve OpenSCAP, and write Ansible scripts to apply security profiles.
• Enhance proactive security with build flags, LKRG, and SELinux without sacrificing usability.

Required Experience:

• At least 4 years of Linux security experience and 2 years of Linux package building.
• Proven understanding of CVE scoring via CVSS and how build/configuration affects CVE affectedness.
• Ability to build tools that accelerate security workflows and integrate with AI.

Why CIQ:

• You will work on infrastructure that powers HPC, AI/ML, defense, and regulated industries.
• The company values builders and open source practitioners, with a remote-first culture.

CIQ builds enterprise infrastructure that powers the world's most demanding workloads, from the operating system layer through AI infrastructure, high-performance computing, and cloud-native orchestration. They are the founding support and services partner of Rocky Linux, and their team is made up of builders, operators, and open source practitioners.