Senior Enterprise Security Engineer, True Anomaly

• This is an ideal role for a self-starter who thrives on ownership, wants to leave their mark on an organization, and is energized by building something meaningful from the ground up
• Minimum of 6 years of experience in information security, with a strong focus on Linux systems security engineering
• Deep expertise in Linux internals, including kernel security mechanisms, namespaces, cgroups, SELinux/AppArmor, and PAM, as well as managing userspace
• Hands-on experience architecting and deploying centralized Linux identity solutions, ideally with integrating with cloud native identity
• Proven experience with configuration management tools such as Ansible, Puppet, Chef, or Salt at enterprise scale
• Strong understanding of Linux security hardening, including CIS Benchmarks, STIGs, and audit framework configuration
• Experience integrating Linux systems with SIEM platforms and building detection logic for Linux-based threats
• Working knowledge of at least one scripting or programming language such as Python, Bash, Go, or Rust
• Excellent analytical, problem-solving, and communication skills
• Ability to work independently and collaboratively in a fast-paced environment
• Experience handling on-call duties and incident response in linux environments
• Must be comfortable working under pressure during active security incidents
• High degree of autonomy and ownership over the Linux security program

Desirable

• As a Senior Enterprise Security Engineer, Linux, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission
• In this position, you will be responsible for defining and executing our enterprise Linux security strategy — from establishing centralized identity and access management across our Linux fleet to deploying configuration management at scale
• You will work closely with infrastructure, IT, and engineering partners to ensure Linux is secured from the ground up while meeting compliance requirements
• You will regularly be faced with answering the question "How can we enable the business to operate on Linux with as little risk as necessary?"
• As part of True Anomaly's Enterprise Security team, you will have significant autonomy to design and own solutions for our most critical infrastructure
• In one project you might be architecting a centralized identity solution for thousands of Linux hosts, while in another you might be codifying security baselines and enforcing them through configuration management pipelines
• You will be joining a fast-paced, challenging environment where your decisions and expertise will have direct, lasting impact on our security posture
• Lead enterprise Linux security strategy across on-prem, cloud, and manufacturing environments
• Architect and implement centralized Linux identity and access management, integrating with cloud native identity (e.g. Entra, Okta, Google)
• Own and deploy configuration management tooling (e.g. Puppet, Salt, Fleet) to enforce security baselines consistently across the Linux fleet
• Develop, maintain, and enforce CIS Benchmark-aligned or STIG-based hardening standards for Linux systems
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats across Linux infrastructure
• Design and implement solutions for privileged access management, sudo policy enforcement, and host-based access controls
• Monitor and analyze security logs, audit trails, and telemetry from Linux systems; integrate with SIEM platforms to detect and respond to threats
• Collaborate with cross-functional teams to embed Linux security requirements into the system development lifecycle and infrastructure-as-code workflows
• Proactively identify gaps in the current Linux security program and drive remediation
• Assist in the development and maintenance of security policies, procedures, and guidelines specific to Linux environments
• Provide subject matter expertise and guidance to internal stakeholders on Linux security best practices and compliance requirements
• Stay current with the Linux threat landscape, kernel-level vulnerabilities, and emerging security tooling
• Support incident response and forensics across linux environments
• This role operates in a fast-paced, high-stakes environment where rapid decision-making and adaptability are essential
• On-call rotation participation, including after-hours participation, is required in this role