Principal Linux Security Engineer

TMSfirst

. Create and use operating-system security errata, including CSAF, VEX, advisories, repository updateinfo, and security feeds for scanners.

Posted 10/6/2026full-timeRemote • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Linux OS security, including the creation of security errata, compliance profiles, and proactive security measures. Proficient in using tools like OpenSCAP and Ansible for security profile application and CVE assessment.

Highest-signal resume keywords

Linux OS SecuritySecurity Errata CreationSTIG and DIS Compliance ProfilesOpenSCAP and Ansible ScriptingCVE Scoring and Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Linux EngineeringSecurity ComplianceAnsible ScriptingOpenSCAPCVSS CalculatorProactive Security MeasuresBuild FlagsLKRGSELinuxLinux Package Building

Tools & Technologies

AI Development ToolsSecurity FeedsSecurity Scanners

Industry Keywords

CSAFVEXSecurity AdvisoriesRepository UpdateinfoCVE

Tech Stack

Tools & technologies

AnsibleLinux

About the role

Key responsibilities & impact

Create and use operating-system security errata, including CSAF, VEX, advisories, repository updateinfo, and security feeds for scanners.
Build STIG and DIS compliance profiles.
Improve OpenSCAP and develop Ansible scripts to apply security profiles.
Implement proactive Linux OS security using build flags, LKRG, and SELinux while preserving usability.
Build tools and use AI to accelerate development, testing, and release.
Score CVEs using the CVSS calculator and assess software affectedness based on build and configuration.

Requirements

What you’ll need

Proven work experience in Security and/or Linux Engineering with a focus on the Linux OS.
At least 4 years of experience doing security in Linux and at least 2 years of experience building Linux Packages.
Understanding of security errata in an operating system, including CSAF, VEX, advisories, repository updateinfo, and security feeds.
Experience building STIG and DIS profiles.
Understanding of OpenSCAP and ability to build Ansible scripts to apply security profiles.
Knowledge of proactive Linux OS security, including build flags, LKRG, and SELinux.
Ability to build tools and interact with AI to accelerate development, testing, and release.
Understanding of CVE scoring and experience using the CVSS calculator.
Ability to determine whether software is affected by a CVE and how build and configuration affect affectedness.

Benefits

Comp & perks

Medical, dental, and vision insurance.
Flexible paid time off.
Employee stock options.
Remote work; no travel required for most positions.