Edge OS & Container Security Engineer

Location: Chennai, India (GTBC)
Experience: 2+ Years Employment Type: Full-Time Work Schedule: General Shift | 10:00 AM – 7:00 PM IST, with periodic North America synchronization calls

Role Overview

CS TECH Ai is looking for an Edge OS & Container Security Engineer to strengthen the cybersecurity posture of Linux-based industrial edge devices and containerized applications deployed in manufacturing environments.

The role will focus on container security, Linux operating system hardening, vulnerability management, network isolation, and compliance with industrial cybersecurity standards. The ideal candidate will have hands-on experience with Linux administration, Docker security, vulnerability scanning, and network security, along with a strong understanding of secure deployment practices in production-critical industrial environments.

Key Responsibilities

1. Container Security & Vulnerability Management

• Perform container image vulnerability assessments using JFrog Xray, Trivy, Grype, or equivalent security scanning tools.
• Execute Open Source Security Analysis (OSSA) approvals for container images and track identified vulnerabilities through remediation or formally approved exceptions.
• Enforce container security best practices, including non-root execution, minimal base images, secure secrets management, and Software Bill of Materials (SBOM) generation and signing.
• Assess CVEs, prioritize security findings based on severity and risk, and coordinate remediation with application and engineering teams.
• Maintain container security assessment reports and compliance evidence.

2. Linux Operating System Hardening

• Implement and maintain Linux security hardening baselines for Debian and Ubuntu distributions, aligned with applicable CIS Benchmarks.
• Configure and validate security controls such as Secure Boot, Trusted Platform Module (TPM), and disk encryption.
• Manage operating system patching, security updates, configuration baselines, and system integrity checks.
• Identify OS-level vulnerabilities, misconfigurations, and unnecessary services, and implement appropriate corrective measures.
• Validate security configurations in laboratory environments before deployment to production edge devices.

3. Network Security & Isolation

• Implement and maintain network separation between Operational Technology (OT) and Information Technology (IT) environments.
• Configure and validate dual-NIC network architectures, disable unused network interfaces and ports, and enforce deny-by-default firewall policies.
• Manage Linux firewall rules using iptables or nftables.
• Secure MQTT-based communications using TLS and appropriate authentication and certificate-management practices.
• Review network configurations to minimize attack surfaces and prevent unauthorized communication between industrial edge devices and external networks.

4. Cybersecurity Research & Standards Compliance

• Monitor emerging cybersecurity threats, Common Vulnerabilities and Exposures (CVEs), security advisories, and vulnerabilities affecting Linux, containers, and industrial edge environments.
• Conduct monthly cybersecurity market and technology research to identify relevant tools, emerging threats, and opportunities for security improvement.
• Evaluate applicable industrial cybersecurity standards, including IEC 62443, and recommend practical security enhancements.
• Translate security standards and technical requirements into actionable checklists, implementation guidelines, and engineering procedures.
• Support continuous improvement of edge security architecture, vulnerability management processes, and compliance practices.

5. Documentation & Cross-Functional Collaboration

• Maintain audit-ready records of vulnerability scans, OSSA approvals, security test results, remediation activities, and compliance checklists.
• Collaborate with application development, infrastructure, and global cybersecurity teams to investigate and resolve security findings.
• Escalate critical vulnerabilities and security risks in accordance with established processes.
• Follow change management procedures and ensure security changes are documented, tested, and approved before production deployment.
• Participate in technical reviews and periodic security assessments to support secure and reliable industrial operations.

Mandatory Technical Skills

• Strong hands-on experience administering Debian/Ubuntu Linux environments, including Bash scripting and OS hardening.
• Proficiency in Docker, Docker Compose, Dockerfile security best practices, and container security fundamentals.
• Experience with vulnerability assessment tools such as JFrog Xray, Trivy, Grype, or equivalent solutions.
• Understanding of CVEs, vulnerability severity, remediation workflows, and open-source software security assessment.
• Solid knowledge of TCP/IP networking, VLANs, network segmentation, and Linux firewall configuration using iptables or nftables.
• Understanding of TLS, MQTT security, certificate management, and secure network communication.
• Knowledge of Linux security controls, patch management, access control, and system integrity.
• Strong documentation, analytical, troubleshooting, and problem-solving skills.

Preferred Skills & Qualifications

• Familiarity with AppArmor or SELinux and Linux mandatory access control mechanisms.
• Knowledge of CIS Benchmarks and industrial cybersecurity standards, particularly IEC 62443.
• Exposure to Secure Boot, TPM, full-disk encryption, and security controls for industrial edge devices.
• Experience with SBOM generation, signing, software supply chain security, and container image compliance.
• Familiarity with Git/GitHub, version control, and basic Python scripting.
• Relevant certifications such as CompTIA Security+, LFCS, RHCSA, or DevSecOps/security certifications are an advantage.
• Exposure to manufacturing, Industrial IoT, Operational Technology (OT), or production-critical environments is preferred.

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Electronics, or a related engineering discipline, preferably with a focus on cybersecurity.
• Minimum 2+ years of relevant experience in Linux administration, container security, vulnerability management, or infrastructure security.
• Demonstrated ability to implement security controls while maintaining system stability and operational availability.

Skills & Competencies

• Strong analytical thinking and a security-first approach to engineering.
• Process-oriented execution with attention to detail, documentation, and change control.
• Curiosity and commitment to continuous learning in the evolving cybersecurity landscape.
• Effective communication and collaboration across technical teams and international time zones.
• A production-focused mindset, with an emphasis on testing, reliability, and minimizing manufacturing downtime.

Key Skills

Linux Security | Debian | Ubuntu | Docker | Docker Compose | JFrog Xray | Trivy | Grype | CVE Management | OSSA | SBOM | CIS Benchmarks | Linux Hardening | Secure Boot | TPM | Disk Encryption | TCP/IP | VLAN | iptables | nftables | MQTT | TLS | OT/IT Network Segmentation | IEC 62443 | AppArmor | SELinux | Bash | Python | Git/GitHub

Interested candidates are invited to share their updated resume at careers@cstech.ai.