Senior Security & Compliance Engineer - eLxr

About Wind River

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades the company has pioneered security, safety, and reliability, powering billions of systems across automotive, aerospace, defense, industrial, medical, and telecommunications industries.

eLxr is a Debian-based Linux distribution engineered for performance, reliability, and enterprise-class security. It is expanding its core engineering team and seeking a highly skilled Security & Compliance Engineer to lead security initiatives for eLxr.

This role is critical to ensuring compliance, security hardening, and audit readiness across all components of our ecosystem, including OS images, installers, CI/CD pipelines, and entitlement systems.

• Drive adherence to FIPS, STIG, CIS benchmarks, and Secure Development Lifecycle (SDL) practices.
• Manage encryption tools (OpenSSL and related libraries) and ensure cryptographic compliance.
• Implement and maintain segmentation, secrets management, certificate lifecycle processes, and least privilege access controls.
• Ensure audit readiness and compliance with industry standards.
• Oversee generation of OS images (.iso, qcow2, container images) and maintain secure OS installer workflows.
• Secure CI pipelines and entitlement backend systems, ensuring integrity and compliance throughout build and deployment processes.
• Monitor CVEs, manage vulnerability remediation, and coordinate timely patching and fixes.
• Implement and maintain secure boot processes.
• Develop and execute security testing strategies, including regression and final build validation.
• Ensure security and compliance across all web properties and entitlement portals.

• Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience).
• 8+ years of experience in Linux security engineering, preferably with Debian or derivatives.
• Strong knowledge of compliance frameworks (FIPS, STIG, CIS) and SDL practices.
• Hands‑on experience with secure boot, encryption tools, and vulnerability management.
• Proficiency in CI/CD security, image generation, and OS installer processes.
• Familiarity with CVE tracking, patching baselines, and audit readiness.
• Excellent problem‑solving and communication skills.
• United States citizenship required or permanent residency required.

• Experience with container security (Docker, Podman).
• Knowledge of entitlement systems and license management.
• Familiarity with large‑scale Linux deployments and automation tools (Ansible, Puppet, etc.).
• Contributions to open‑source projects.

• Hybrid work model for workplace flexibility.
• Comprehensive health, dental, and life insurance.
• Short and long‑term disability coverage.
• RRSP matching for financial security.
• Flexible time‑off policies for work‑life balance.
• Employee assistance program for mental well‑being.
• Learning benefits, including a Linked In Learning subscription and seminars.

• This position requires U.S. citizenship and a security clearance for work on U.S. government projects.

Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.