Senior Enterprise Security Engineer, Linux

True Anomaly•Long Beach, CA

1d•$140,000 - $225,000•Hybrid

About The Position

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. As a Senior Enterprise Security Engineer, Linux, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission. In this position, you will be responsible for defining and executing our enterprise Linux security strategy — from establishing centralized identity and access management across our Linux fleet to deploying configuration management at scale. You will work closely with infrastructure, IT, and engineering partners to ensure Linux is secured from the ground up while meeting compliance requirements. You will regularly be faced with answering the question "How can we enable the business to operate on Linux with as little risk as necessary?" As part of True Anomaly's Enterprise Security team, you will have significant autonomy to design and own solutions for our most critical infrastructure. In one project you might be architecting a centralized identity solution for thousands of Linux hosts, while in another you might be codifying security baselines and enforcing them through configuration management pipelines. You will be joining a fast-paced, challenging environment where your decisions and expertise will have direct, lasting impact on our security posture. This is an ideal role for a self-starter who thrives on ownership, wants to leave their mark on an organization, and is energized by building something meaningful from the ground up. This position requires the ability to obtain and maintain a security clearance.

Requirements

Minimum of 6 years of experience in information security, with a strong focus on Linux systems security engineering.
Deep expertise in Linux internals, including kernel security mechanisms, namespaces, cgroups, SELinux/AppArmor, and PAM, as well as managing userspace
Hands-on experience architecting and deploying centralized Linux identity solutions, ideally with integrating with cloud native identity.
Proven experience with configuration management tools such as Ansible, Puppet, Chef, or Salt at enterprise scale.
Strong understanding of Linux security hardening, including CIS Benchmarks, STIGs, and audit framework configuration.
Experience integrating Linux systems with SIEM platforms and building detection logic for Linux-based threats.
Working knowledge of at least one scripting or programming language such as Python, Bash, Go, or Rust.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and collaboratively in a fast-paced environment.
Experience handling on-call duties and incident response in linux environments.

Nice To Haves

Active TS/SCI clearance or ability to obtain and maintain security clearance.
Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
Experience securing Linux in manufacturing or operational technology (OT) environments.
Experience with cloud-hosted Linux fleets across Azure, AWS, or Google Cloud.
Experience with infrastructure-as-code paradigms, Terraform, GitOps, and CI/CD pipelines.
Familiarity with FedRAMP, CMMC, and NIST 800-53/800-171 frameworks and their application to Linux systems.
Experience with privileged access management (PAM) tooling such as CyberArk, HashiCorp Vault, or similar.
Familiarity with eBPF-based security tooling and runtime threat detection
Experience working at a startup and/or in the defense industry.

Responsibilities

Lead enterprise Linux security strategy across on-prem, cloud, and manufacturing environments.
Architect and implement centralized Linux identity and access management, integrating with cloud native identity (e.g. Entra, Okta, Google)
Own and deploy configuration management tooling (e.g. Puppet, Salt, Fleet) to enforce security baselines consistently across the Linux fleet.
Develop, maintain, and enforce CIS Benchmark-aligned or STIG-based hardening standards for Linux systems.
Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats across Linux infrastructure.
Design and implement solutions for privileged access management, sudo policy enforcement, and host-based access controls.
Monitor and analyze security logs, audit trails, and telemetry from Linux systems; integrate with SIEM platforms to detect and respond to threats.
Collaborate with cross-functional teams to embed Linux security requirements into the system development lifecycle and infrastructure-as-code workflows.
Proactively identify gaps in the current Linux security program and drive remediation.
Assist in the development and maintenance of security policies, procedures, and guidelines specific to Linux environments.
Provide subject matter expertise and guidance to internal stakeholders on Linux security best practices and compliance requirements.
Stay current with the Linux threat landscape, kernel-level vulnerabilities, and emerging security tooling.
Support incident response and forensics across linux environments.