Aptive
Senior Security & Compliance Engineer - eLxr
USA Remote Worksite · Senior · Contract
No sponsorshipDetected 28 days ago
DockerAnsibleCI/CDLinuxCybersecurity5G/LTELeadershipCommunicationProblem Solving
About the role
- This role is critical to ensuring compliance, security hardening, and audit readiness across all components of our ecosystem, including OS images, installers, CI/CD pipelines, and entitlement systems.
- Ensure audit readiness and compliance with industry standards.
- Web & Portals: Ensure security and compliance across all sites (.org,.pro,.dev) and entitlement portals.
Responsibilities
- Oversee generation of OS images (.iso, qcow2, container images) and maintain secure OS installer workflows.
- Secure CI pipelines and entitlement backend systems, ensuring integrity and compliance throughout build and deployment processes.
- Monitor CVEs, manage vulnerability remediation, and
- Implement and maintain secure boot processes.
- Develop and execute security testing strategies, including regression and final build validation.
- Drive adherence to FIPS, STIG, CIS benchmarks, and Secure Development Lifecycle (SDL) practices.
- Security & Compliance: Implement and maintain segmentation, secrets management, certificate lifecycle processes, and least privilege access controls.
- Image & Installer Management: Oversee generation of OS images (.iso, qcow2, container images) and maintain secure OS installer workflows.
- CI/CD & Backend Systems: Secure CI pipelines and entitlement backend systems, ensuring integrity and compliance throughout build and deployment processes.
- Vulnerability Management: Monitor CVEs, manage vulnerability remediation, and
Requirements
- Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience).
- 8+ years of experience in Linux security engineering, preferably with Debian or derivatives.
- Strong knowledge of compliance frameworks (FIPS, STIG, CIS) and SDL practices.
- Hands-on experience with secure boot, encryption tools, and vulnerability management.
- Proficiency in CI/CD security, image generation, and OS installer processes.
- Familiarity with CVE tracking, patching baselines, and audit readiness.
- United States Citizenship required or permanent residency is required.
Nice to have
- Preferred Skills:
Skills
- Experience with container security (Docker, Podman).
- Knowledge of entitlement systems and license management.
- Familiarity with large-scale Linux deployments and automation tools (Ansible, Puppet, etc.).
- Contributions to open-source projects.
- Hybrid work model for workplace flexibility
- Comprehensive health, dental, and life insurance
- Short and long-term disability coverage
- RRSP matching for financial security
- Flexible time-off policies for work-life balance
- Employee assistance program for mental well-being
- Learning benefits, including a LinkedIn Learning subscription and seminars
- Your journey to make a meaningful impact begins here.
Benefits
- Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy.
Company info
- At Wind River, we strictly adhere to all applicable data privacy laws.
Equal opportunity
- Equal Opportunity Employer with a commitment to diversity.
Visa & Work Authorization
- United States Citizenship required or permanent residency is required
This listing is sourced directly from Aptive's careers page and normalized into a canonical job model.