About the Project

We are looking for a senior security expert to architect and implement a robust security framework from scratch for a custom cloud platform product.

Key Responsibilities

- Infrastructure Hardening: Secure the bare-metal Linux environment and establish strict file permissions, user groups, and the Principle of Least Privilege.
- Application Security: Secure the Python control application. Package, compile, or obfuscate the Python codebase (e.g., using Nuitka/Cython) to protect intellectual property on the client server.
- Secure Execution Environment: Eliminate the risk of command injection. Transition open Bash executions to a secure, sanitized execution pipeline.
- Encrypted Communications: Secure all data in transit. Implement TLS/WSS for the web-to-VM browser stream and secure local Unix sockets for internal communication.
- Architecture Review: Evaluate the setup of virtualization tools and Bash scripts, and advise on or implement migrations to enterprise-grade, secure alternatives where necessary for production environments.

Required Skills & Experience

- 8-12 years of hands-on experience in Infrastructure Security, Linux Security,



DevSecOps, or Virtualization Security.
- Deep expertise in Linux Systems Administration and Kernel Security.
- Strong background in Python Application Security (AppSec), secure coding practices, and application packaging/obfuscation (e.g., Nuitka, Cython).
- Experience securing virtualization technologies (e.g., KVM/QEMU, VMware, Xen, Proxmox, or similar).
- Experience implementing secure web-based remote desktop protocols.
- Robust knowledge of network hardening, reverse proxies (Nginx/Traefik), TLS/WSS implementation, and firewall configurations (UFW/iptables/nftables).
- Experience with secure shell scripting, command execution controls, and mitigation of command injection vulnerabilities.
- Ability to review, design, and implement enterprise-grade security architectures for production environments.

Engagement Requirement:

- Must be available to work as a Freelancer/Independent Consultant on a contract basis and be able to deliver project milestones independently with minimal supervision.

📌 Lead Virtualization Security Engineer / Infrastructure Security Specia (Telangana)
🏢 Smartncode
📍 Telangana