Find work in the United States.

6,291,184 jobs across our US network. How we count

Jobs in the United States

25+ jobs

Save this search

Added 1 min ago
SD
Systems Engineer - Mechatronics, Electrical
Sigma Design
Redmond, WA
- $95,000 to $137,000 USD / year
The Systems Engineer – Mechatronics / Electrical is responsible for troubleshooting, root cause analysis, and sustaining support of mechatronic and electrical systems within advanced…
Added 1 min ago
SD
Systems Engineer - Embedded Firmware
Sigma Design
Redmond, WA
- $95,000 to $137,000 USD / year
The Systems Engineer – Embedded Firmware is responsible for troubleshooting, root cause analysis, and sustaining support of embedded firmware systems within advanced robotic platforms. This…
Added 2 mins ago
Senior Business Analyst -Technical
Wolters Kluwer DXG U.S., Inc.
Coppell, TX
…technical acumen and the ability to leverage AI tools to reverse engineer existing applications, discover business rules, generate specifications, validate requirements, and support…
Added 4 mins ago
Chief Engineer - Waldorf Astoria Beverly Hills
Hilton
Beverly Hills, CA
As a leading hotel in the luxury market, Waldorf Astoria Beverly Hills is looking for an Assistant Chief Engineer to join the Engineering Team at this beautiful property!
Added 5 mins ago
A
Electrical Engineer
Actalent
Poway, CA
- $52.88 to $62.5 USD / hour
Job Title: Electrical EngineerJob DescriptionAs an Electrical Engineer, you will be responsible for troubleshooting inverter systems that fail production testing or are returned from the…
Added 5 mins ago
A
Test Engineer
Actalent
Poway, CA
- $50 USD / hour
Job Title: Test EngineerJob DescriptionWe are seeking an experienced Test Engineer to join a growing engineering team focused on power electronics products. In this role, you will design,…
Added 7 mins ago
AT
Spacecraft Dynamics Engineer
Apex Technology, Inc.
Los Angeles, CA
- $136,000 to $220,000 USD / year
Apex is looking for a Spacecraft Dynamics Engineer to own dynamic analysis and vehicle response across our spacecraft. This role is responsible for predicting and validating how our…
Added 8 mins ago
Solutions Engineer, DroneDeploy
Procore Technologies, Inc.
TX
We are looking for a Solutions Engineer, DroneDeploy to own enterprise accounts end-to-end and scale reality capture adoption across physical asset portfolios. As the Solutions Engineer,…
Added 9 mins ago
G
Quality Engineer
GPAC
Danbury, CT
- $85,000 to $125,000 USD / year
Develop a strong working knowledge of precision measurement equipment (e.g., CMMs, vision systems, etc.) to provide technical guidance, support troubleshooting, and train QC Inspectors in…
Added 9 mins ago
G
Quality Engineer
GPAC
Bristol, CT
- $85,000 to $125,000 USD / year
Develop a strong working knowledge of precision measurement equipment (e.g., CMMs, vision systems, etc.) to provide technical guidance, support troubleshooting, and train QC Inspectors in…
Added 9 mins ago
G
Quality Engineer
GPAC
New Haven, CT
- $85,000 to $125,000 USD / year
Develop a strong working knowledge of precision measurement equipment (e.g., CMMs, vision systems, etc.) to provide technical guidance, support troubleshooting, and train QC Inspectors in…
Added 9 mins ago
G
Quality Engineer
GPAC
Middletown, CT
- $85,000 to $125,000 USD / year
Develop a strong working knowledge of precision measurement equipment (e.g., CMMs, vision systems, etc.) to provide technical guidance, support troubleshooting, and train QC Inspectors in…
Added 9 mins ago
G
Quality Engineer
GPAC
Hartford, CT
- $85,000 to $125,000 USD / year
Develop a strong working knowledge of precision measurement equipment (e.g., CMMs, vision systems, etc.) to provide technical guidance, support troubleshooting, and train QC Inspectors in…
Added 12 mins ago
I
IT Systems Engineer
Icarus
El Segundo, CA
- $120,000 to $160,000 USD / year
As an IT Systems Engineer, you will own internal IT from the laptop on a new hire's desk to the systems that keep our factory connected. This is a hands-on individual contributor role with…
Added 16 mins ago
Product Design Engineer - iPhone
Apple
Cupertino, CA
We are looking to add a product design engineer to the team. Day to day job responsibilities include the design of tight tolerance components for prototype systems, development of test…
Added 17 mins ago
Supplier Development Engineer
Quantum Space
Tulsa, OK · Broken Arrow, OK
We are seeking a skilled and motivated Supplier Development Engineer to support the Ranger spacecraft program by ensuring the technical capability, quality, and performance of suppliers…
Added 17 mins ago
Manufacturing Engineer (Welding)
Quantum Space
Tulsa, OK · Broken Arrow, OK
We are seeking a skilled and technically driven Manufacturing Engineer (Welding) to lead the development, qualification, and implementation of welding processes for our Ranger spacecraft…
Added 17 mins ago
Validation and Verification Engineer, Aviation Engineering
Skyryse
El Segundo, CA · Los Angeles, CA
VALIDATION & VERIFICATION ENGINEER, AVIATION ENGINEERING - EL SEGUNDO, CA
Added 25 mins ago
Electronic Test Technician - 1st Shift (Onsite)
RTX
United States
…for specific test to be performed, performing the testing of systems, assemblies, subassemblies, electronics, electromechanical, & sensor systems, preparing documentation of test results or…
Added 25 mins ago
Senior Automated Test Systems Engineer (Onsite)
RTX
United States
Design and develop automated test systems, including test hardware and software, to support product engineering and manufacturing.
Added 25 mins ago
Software Engineer (Embedded)
RTX
United States
Collins Aerospace is seeking a qualified Software Engineer to support the Identification Friend or Foe (IFF) programs onsite in Marlborough, MA
Added 25 mins ago
Software Engineer II
RTX
United States
Collins Aerospace is seeking a qualified Senior Software Engineer to support the Identification Friend or Foe (IFF) programsAt RTX, the world's largest aerospace and defense company,…
Added 25 mins ago
Senior Software Engineer (Embedded SW)
RTX
United States
Collins Aerospace is seeking a qualified Sr Software Engineer to support the Identification Friend or Foe (IFF) programs onsite in Marlborough, MA
Added 25 mins ago
Engineer II, Manufacturing
Careers | ElDorado National California Inc
Riverside, CA
…Engineering) software to develop work instructions for various systems and modules, design and iterate new models, and produce detailed engineering…
Added 26 mins ago
DevSecOps Security Engineer
Leidos
Egg Harbor Township, NJ
Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the development of the Leidos Common Automation Platform…

Fly.io

Platform Security Engineer

Remote, United States

$180,000 to $225,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $180,000 to $225,000 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About Fly.io

We're building a public cloud that runs on our own hardware all over the world. Customers hand us containers; we convert them into micro-VMs under hardware virtualization, each with its own kernel, on thousands of bare-metal hosts we operate ourselves. A growing share of those workloads are AI agents and inference, which means a growing share of the people attacking cloud platforms are interested in us.

Isolation is the product. The boundary between one customer's workload and the next, and between any workload and our own control plane, is a stack of things we build and run: the VMMs and their jailers, seccomp filters, host networking rules, the identity each host presents to the rest of the fleet, and the custom kernel underneath all of it. When that boundary holds, nobody notices. That's the job.

The Role

We have a security team. It covers application security, trust boundaries and auth, vulnerability research against our own hypervisor stack, corporate security, compliance, and disclosure. What it doesn't have is someone who works alongside the platform team hacking on the platform itself: the kernel, the hypervisor jailers, the syscall filters, host network isolation, and the trust relationships between hosts. That's the gap this role closes.

The work has two halves, and you will own both:

• Keep the guest in the VM. Harden the per-workload boundary on every host.

• Plan for the worst. Limit the blast radius for when the next horrible KVM guest-to-host escape drops.

You will report to the Head of Security, who will set your priorities and review your work, but you will spend most of your day with the Platform team, who own the systems you will be changing. Coordination and communication will be just as important as raw technical skills.

What You'll Be Doing

Isolation and sandboxing. We run two VMMs, Firecracker and Cloud Hypervisor, with jailers around them. You will own the syscall filtering, the process-level confinement, the network confinement around the jailers, and the violation telemetry that feeds our detection pipeline, across both VMMs and the host services that make up the platform.

Host network isolation. A lot of our fleet's isolation rests on nftables and friends. You will own what each host is allowed to talk to, by role, and the health checks and killswitches that tell us the rules in force are the ones we intended.

Blast radius and control-plane trust. The second half of the job. You will own the trust model between hosts and the control plane: how a host identifies itself and how its actions are attributed, how host-to-host operations such as machine migration are authorized, which services run on hosts that also run customer workloads, and what credentials live on a host and what each one can reach. You will design this with the Platform and Networking teams, build the host-local pieces yourself, and verify the rest.

The kernel. We build and patch our own host kernel. You will own the patching cadence and its SLA, keep kernel expertise spread across the fleet team rather than concentrated in one person, and own live kernel patching for the fixes that cannot wait for a reboot cycle.

Agent workloads. The platform increasingly runs agents, including a sandbox product for them. You will take the isolation half of that design seat: VMM confinement, worker-side controls, and what the platform can honestly guarantee an agent workload. This may even include compute where we no longer own the metal, and we will need to design for a fleet that spans trust levels.

When it breaks. A suspected guest escape, a host behaving strangely, weird kernel behavior: these need someone who can lead the technical investigation on the host, not just coordinate it. You will be one of the names we call, and you will help strengthen our forensics playbook.

You will want to be comfortable working with coding agents. We lean on them hard, and the honest truth of low-level security work is that an agent will confidently hand you a kernel patch that is subtly wrong. You will need to be the person who catches it.

Who We're Looking For

• You've shipped non-trivial Linux kernel, KVM or hypervisor, or BPF security work in production.

• You have production experience with seccomp filters, jailer or sandbox configuration, or VM isolation hardening.

• You have one anchoring domain (kernel and sandboxing, or host networking) with credible reach into the others. You will ramp across the rest over 6 to 12 months.

• You've run hardware virtualization on hardware you didn't control: bare-metal cloud instances, nested virtualization, or hosts in a customer's account. Not required, but definitely nice-to-have.

• You've been the platform-security specialist on a security team before, and you've shipped security work in a matrixed org by collaboration rather than authority.

• You're comfortable being the technical authority on low-level work without a more senior security engineer above you.

• You write well asynchronously. Most of Fly happens in Slack threads and written design discussions.

This is not an application-security role. If your background is primarily SAST, code review, or web app pentesting, we already have that lane covered.

Other Important Things to Know We don't want to sell you a bill of goods. A few things about this role are genuinely hard:

• You will be the depth. Nobody in the security function can backstop you on kernel, syscalls, BPF, or network isolation. Your technical sparring partners are our vulnerability researcher and the Platform and Networking teams, and those are relationships you will build.

• Much of the work lives in systems other teams own. You will change code in the platform and networking repositories, and those teams are busy. Getting things shipped depends on collaboration and clear writing more than on org-chart authority. The reporting line is designed to protect your priorities, not to let you dictate theirs.

• The scope is real and the structure is thin. There's no backlog handed to you. Work surfaces from incidents, from Slack, from the fleet. You will manage your own scope, and that is harder than it looks.

• We're on call, and our stuff is global. When isolation breaks, customers notice, in every time zone.

Extrapolate the bad implications, then ask us about them, and we'll be candid.

Our Process for Hiring

This is a senior, fully-remote, full-time position. We offer competitive equity grants with a long exercise window, health care benefits, flexible vacation time (with a minimum), and hardware and phone allowances.

We respect career experience but we aren't hypnotized by it, and we don't trust resumes or interviews to tell us who can do this work. Instead we show you the kind of work we actually do and see if you enjoy doing it. The process is about five hours of your time end to end:

• Short written application. A few questions about your background and how you work.

• Work sample (async, 2 to 3 hours). A kernel live patch for a recent CVE on a preconfigured environment we give you, a short critique of an AI-generated attempt at the same patch, and a paragraph on how you used AI tooling along the way.

Phone Screen - 15-20 min HR Phone Screen

• Workday (live, 2 hours). You and one of our platform engineers will work a host-isolation scenario together over Slack. Coding agents are welcome; we want to see how you drive one.

• Final (30 minutes). A conversation with our CEO.

Apply About employer

More about this job

Skills

Research
Regulatory compliance
Communication skills
Linux
Collaboration
Penetration testing
Reporting

Report this job