5 Kernel Hardening Jobs

Key Responsibilities: - Maintain security features across multiple layers of BMWs Linux distribution: from hardware, bootloader, and kernel to end-user applications. - Review changes in existing security policies (SELinux, Linux permissions, systemd configuration, etc.). - Support other teams in implementing secure products. - Contribute to the configuration and source code of BMW OS security features. Required Experience and Skills - Hands-on experience in Linux or/and Android security (e.g., Kernel hardening, Linux permissions, systemd, capabilities, namespaces, Linux RPC). - Knowledge of isolation techniques and containerization mechanisms is a plus. - Thorough understanding of security principles, latest techniques, and operating system features (e.g., secure boot, disk encryption, SELinux, integrity protection, cryptographic protocols). - Background in modern software development in one of the languages C++, Java, Kotlin. Experience with Python as a universal tool. - Experience with Continuous Integration and Delivery tools (e.g., Jenkins, Zuul, Github Actions, or Gitlab CI). - Understanding of basic principles of threat modeling. Practical experience is a plus.

Must-Have Skills Solid Python development experience including object-oriented programming, designing reusable modules, working with testing frameworks like pytest (incl. fixtures), and building command-line tools for automation or system tasks. Hands-on experience working with Linux systems beyond basic usage — such as writing shell scripts, analyzing system logs, configuring services, or troubleshooting runtime issues. Familiarity with CI/CD pipelines (e.g., GitLab CI, Jenkins, GitHub Actions). Ability to write clean, testable, and maintainable code. A curiosity-driven mindset and interest in how complex systems work under the hood. Nice to Have (or Eager to Learn) Strong motivation to grow into platform security topics such as secure boot, disk encryption, access control, and sandboxing in Linux/Android environments. Interest in system-level software design — including how operating systems enforce isolation, security boundaries, and platform resilience. Curiosity about attack surface reduction, ethical hacking, or platform hardening — even without prior experience. Keywords Python Developer Clean Code pytest CI/CD (GitLab, Jenkins, GitHub Actions) Linux System Automation Android Platform Development

Basic Requirements and Education - Business fluent English. - University degree in computer science or a comparable field of study, ideally with a security focus. Required Experience and Skills - Hands-on experience in Linux or/and Android security (e.g., Kernel hardening, Linux permissions, systemd, capabilities, namespaces, Linux RPC). - Knowledge of isolation techniques and containerization mechanisms is a plus. - Thorough understanding of security principles, latest techniques, and operating system features (e.g., secure boot, disk encryption, SELinux, integrity protection, cryptographic protocols). - Background in modern software development in one of the languages C++, Java, Kotlin. Experience with Python as a universal tool. - Experience with Continuous Integration and Delivery tools (e.g., Jenkins, Zuul, Github Actions, or Gitlab CI). - Understanding of basic principles of threat modeling. Practical experience is a plus. #### Keywords - Automotive Infotainment - Linux - SELinux - Android - Cyber Security - C++ - CI/CD - Threat modeling

Key Responsibilities: - Maintain security features across multiple layers of BMWs Linux distribution: from hardware, bootloader, and kernel to end-user applications. - Review changes in existing security policies (SELinux, Linux permissions, systemd configuration, etc.). - Support other teams in implementing secure products. - Contribute to the configuration and source code of BMW OS security features. Required Experience and Skills - Hands-on experience in Linux or/and Android security (e.g., Kernel hardening, Linux permissions, systemd, capabilities, namespaces, Linux RPC). - Knowledge of isolation techniques and containerization mechanisms is a plus. - Thorough understanding of security principles, latest techniques, and operating system features (e.g., secure boot, disk encryption, SELinux, integrity protection, cryptographic protocols). - Background in modern software development in one of the languages C++, Java, Kotlin. Experience with Python as a universal tool. - Experience with Continuous Integration and Delivery tools (e.g., Jenkins, Zuul, Github Actions, or Gitlab CI). - Understanding of basic principles of threat modeling. Practical experience is a plus.

Key Responsibilities: - Design and implement tools and test suites to ensure that the desired security measures are working as expected. - Derive test cases in areas that are not completely covered and ensure our security measures are fully operational for all software releases. - Contribute to test automation and streamline processes to reduce the costs of test re-execution. - Harden BMWs common Linux platform for all Infotainment ECUs by developing a common validation strategy. This strategy enables BMW to deliver all software versions with a consistently high security level. Required Experience and Skills - A strong understanding of Linux/Android and their security mechanisms (Linux permissions, system, secure RPC, etc.) - Experience in developing tests and utilities in Python. - Experience with Continuous Integration and Delivery tools (e.g., Jenkins, Zuul, GitHub Actions, or GitLab CI). - Knowledge of security principles, the latest techniques, and operating system features (e.g., secure boot, disk encryption, integrity protection, Linux kernel hardening). - A background in penetration testing is beneficial but not required.