Saronic Technologies logoSaronic Technologies logo

Senior Security Engineer - Software Security

On-site Full-time

Clicking Apply Now takes you to AutoApply where you can tailor your resume and apply.


Experience Level

Senior

Qualifications

The ideal candidate will possess a strong foundation in software security, with proven experience in securing software systems throughout their lifecycle. A deep understanding of Rust programming and NixOS is essential, alongside familiarity with CI/CD practices and vulnerability management.

About the job

Saronic Technologies is at the forefront of transforming maritime autonomy, committed to crafting cutting-edge solutions that enhance seafaring operations through innovative autonomous platforms.

As a pivotal force within our security team, we invite applications for a Senior Security Engineer, specializing in software and systems security. This role holds the responsibility of safeguarding Saronic's software platforms, ensuring the integrity of our systems and deployment infrastructure from development to production. Our technology stack includes NixOS and Rust, and we require a candidate with a deep understanding of securing software throughout its entire lifecycle, from reproducible builds and dependency management to CI/CD pipeline security, runtime hardening, and safe deployment in both vessel and cloud environments. In this capacity, you will serve as the technical authority on the secure building, shipping, and operation of our software.

Key Responsibilities:

  • Oversee the application security framework for Saronic's software platforms, encompassing Rust-based services, system software, and related applications.

  • Lead initiatives for secure code reviews, including SAST, DAST, and fuzz testing, while establishing secure coding standards for Rust development, focusing on memory safety, safe FFI boundaries, and robust error handling.

  • Perform threat modeling for software systems and convert findings into actionable security requirements integrated with design reviews and sprint planning.

  • Manage vulnerabilities in software dependencies, including tracking, prioritization, and remediation of risks in third-party crates and libraries.

  • Secure and strengthen NixOS configurations for vessel platforms and development infrastructure, utilizing Nix's reproducibility and declarative model for security enforcement.

  • Create system hardening profiles in NixOS, incorporating kernel hardening, service isolation, mandatory access controls, and configurations that minimize the attack surface.

  • Establish and enforce package management and dependency policies within the Nix ecosystem, ensuring auditable, reproducible build closures free from unauthorized or vulnerable packages.

  • Design secure system update and rollback mechanisms leveraging NixOS capabilities, ensuring fleet-wide consistency and integrity.

  • Implement security controls throughout the CI/CD pipeline, focusing on source integrity, build isolation, artifact signing, and deployment verification with ephemeral, isolated, and hardened build environments.

About Saronic Technologies

Saronic Technologies is a pioneering company dedicated to advancing maritime operations through innovative autonomous solutions, striving to enhance safety and efficiency at sea.

Similar jobs

Browse all companies, explore by city & role, or SEO search pages.

Tailoring 0 resumes

We'll move completed jobs to Ready to Apply automatically.