Hardware / Low Level Security Engineer

Cerebras Systems•Toronto, ON

12h

About The Position

Cerebras Systems builds the world's largest AI chip, 56 times larger than GPUs. Our novel wafer-scale architecture provides the AI compute power of dozens of GPUs on a single chip, with the programming simplicity of a single device. This approach allows Cerebras to deliver industry-leading training and inference speeds and empowers machine learning users to effortlessly run large-scale ML applications, without the hassle of managing hundreds of GPUs or TPUs. Cerebras' current customers include top model labs, global enterprises, and cutting-edge AI-native startups. OpenAI recently announced a multi-year partnership with Cerebras, to deploy 750 megawatts of scale, transforming key workloads with ultra high-speed inference. Thanks to the groundbreaking wafer-scale architecture, Cerebras Inference offers the fastest Generative AI inference solution in the world, over 10 times faster than GPU-based hyperscale cloud inference services. This order of magnitude increase in speed is transforming the user experience of AI applications, unlocking real-time iteration and increasing intelligence via additional agentic computation. We are seeking a Hardware / Low Level Security Engineer to harden the foundational layers of the systems that run the fastest AI inference on earth. You will work close to the metal — across the Linux kernel, firmware, secure boot, and hardware roots of trust — to identify weaknesses, build defenses, and partner with platform and infrastructure teams to ship low-level security improvements. The right candidate brings deep systems expertise, a security mindset shaped by hands-on hardening and exploitation, and a passion for protecting unique compute architectures at scale.

Requirements

Background in Mechanical and/or Electrical Engineering with career focus in Cybersecurity.
Deep familiarity with the Linux kernel — including kernel modules, syscall interface, namespaces, cgroups, eBPF, and LSM.
Hands-on experience with firmware, UEFI, secure boot, TPM, and platform integrity tooling.
Strong proficiency in C and a modern systems language (Rust, Go, or similar), with the ability to read and write production kernel code.
Familiarity with hardware-level isolation primitives (e.g., IOMMU, SR-IOV, confidential computing); exposure to non-standard compute architectures a plus.
Strong written communication skills, with the ability to make low-level security concepts approachable for non-specialists.

Responsibilities

Partner with platform, infrastructure, and hardware teams to embed security controls from physical hardware through runtime.
Design and implement security hardening across the Linux kernel, bootloader, firmware, and host OS layers of Cerebras compute platforms.
Drive secure boot, measured boot, and attestation strategies across our infrastructure, from the wafer-scale system to supporting host nodes.
Conduct deep security reviews of kernel modules, drivers, and low-level system components — identifying and remediating memory safety, privilege escalation, and isolation issues.
Develop kernel-level monitoring and telemetry (e.g., eBPF) to enable detection of low-level attacker behavior.
Stay ahead of emerging kernel CVEs, supply chain risks, and hardware-level threats — driving response and remediation across the fleet.
Document low-level security posture, threat models, and remediation playbooks in clear, accessible language.