Platform Security Engineer; Fully Remote

Position: Platform Security Engineer (Fully Remote)

• You will own the isolation and sandboxing across VMMs, host networking, and kernel.
• Design blast radius limits and trust models between hosts and control plane.
• Drive technical investigations for guest escapes and kernel anomalies.

What You'll Be Doing:

• Harden per-workload boundaries with syscall filtering, network confinement, and violation telemetry.
• Own host network isolation with nftables and health checks.
• Lead kernel patching cadence and live kernel patching for critical fixes.

Who We're Looking For:

• Experienced with Linux kernel, KVM, BPF, and seccomp in production.
• Comfortable collaborating across teams and being the senior security expert on low-level work.
• Write well asynchronously and thrive in a remote-first culture.

Fly.io

We build a public cloud that runs on our own hardware all over the world. We are a remote-first team operating thousands of bare-metal hosts, with a culture of engineering excellence and security focus.