About the job
Saronic Technologies is at the forefront of transforming maritime autonomy, committed to crafting cutting-edge solutions that enhance seafaring operations through innovative autonomous platforms.
As a pivotal force within our security team, we invite applications for a Senior Security Engineer, specializing in software and systems security. This role holds the responsibility of safeguarding Saronic's software platforms, ensuring the integrity of our systems and deployment infrastructure from development to production. Our technology stack includes NixOS and Rust, and we require a candidate with a deep understanding of securing software throughout its entire lifecycle, from reproducible builds and dependency management to CI/CD pipeline security, runtime hardening, and safe deployment in both vessel and cloud environments. In this capacity, you will serve as the technical authority on the secure building, shipping, and operation of our software.
Key Responsibilities:
Oversee the application security framework for Saronic's software platforms, encompassing Rust-based services, system software, and related applications.
Lead initiatives for secure code reviews, including SAST, DAST, and fuzz testing, while establishing secure coding standards for Rust development, focusing on memory safety, safe FFI boundaries, and robust error handling.
Perform threat modeling for software systems and convert findings into actionable security requirements integrated with design reviews and sprint planning.
Manage vulnerabilities in software dependencies, including tracking, prioritization, and remediation of risks in third-party crates and libraries.
Secure and strengthen NixOS configurations for vessel platforms and development infrastructure, utilizing Nix's reproducibility and declarative model for security enforcement.
Create system hardening profiles in NixOS, incorporating kernel hardening, service isolation, mandatory access controls, and configurations that minimize the attack surface.
Establish and enforce package management and dependency policies within the Nix ecosystem, ensuring auditable, reproducible build closures free from unauthorized or vulnerable packages.
Design secure system update and rollback mechanisms leveraging NixOS capabilities, ensuring fleet-wide consistency and integrity.
Implement security controls throughout the CI/CD pipeline, focusing on source integrity, build isolation, artifact signing, and deployment verification with ephemeral, isolated, and hardened build environments.
