Lead Virtualization Security Engineer /Infrastructure Security

About the Project

We are looking for a senior security expert to architect and implement a robust security framework from scratch for a custom cloud platform product.

Key Responsibilities

• Infrastructure Hardening: Secure the bare-metal Linux environment and establish strict file permissions, user groups, and the Principle of Least Privilege.
• Application Security: Secure the Python control application. Package, compile, or obfuscate the Python codebase (e.g., using Nuitka/Cython) to protect intellectual property on the client server.
• Secure Execution Environment: Eliminate the risk of command injection. Transition open Bash executions to a secure, sanitized execution pipeline.
• Encrypted Communications: Secure all data in transit. Implement TLS/WSS for the web-to-VM browser stream and secure local Unix sockets for internal communication.
• Architecture Review: Evaluate the setup of virtualization tools and Bash scripts, and advise on or implement migrations to enterprise-grade, secure alternatives where necessary for production environments.

Required Skills & Experience

• 8-12 years of hands-on experience in Infrastructure Security, Linux Security, DevSecOps, or Virtualization Security.
• Deep expertise in Linux Systems Administration and Kernel Security.
• Strong background in Python Application Security (AppSec), secure coding practices, and application packaging/obfuscation (e.g., Nuitka, Cython).
• Experience securing virtualization technologies (e.g., KVM/QEMU, VMware, Xen, Proxmox, or similar).
• Experience implementing secure web-based remote desktop protocols.
• Strong knowledge of network hardening, reverse proxies (Nginx/Traefik), TLS/WSS implementation, and firewall configurations (UFW/iptables/nftables).
• Experience with secure shell scripting, command execution controls, and mitigation of command injection vulnerabilities.
• Ability to review, design, and implement enterprise-grade security architectures for production environme