Develop and maintain runtime products by researching legacy codebases, backporting CVE security patches, building packages across Linux distributions and architectures, and creating automated testing and AI-assisted security workflows. The role requires deep C/C++ systems expertise, build-toolchain archaeology, cross-compilation experience, and strong ownership of correctness. It also includes customer support for compatibility and upgrade issues.
About the Role
We are seeking a Senior Software Engineer to join our Never-Ending Support (NES) team. This role is specifically focused on developing and proving out new product lines in our runtimes. You will research new potential products to add to our ever expanding product line, produce critical security patches for CVEs in our various runtime products (PHP, Postgres, NGINX, etc.), deliver builds across many operating system distributions, and build the automation systems that make this work scale.
Key Responsibilities
- Research and prove out new NES products: assess an end-of-life project's codebase, build system, and CVE history, then stand up a working, supportable build pipeline for it
- Maintain the existing NES portfolio by analyzing upstream security fixes and backporting CVE patches in C, C++, and other languages to end-of-life versions
- Implement more comprehensive or novel security fixes to end of life technologies
- Read, write, and review CVE backports, reasoning about what a patch might break across versions, platforms, and configurations
- Build and deliver packages across many Linux distributions (RHEL, Debian, Ubuntu, Alpine, Amazon Linux, and others), and add support for new distributions and releases as they ship
- Resurrect and maintain build environments for legacy code: toolchain archaeology, pinning dependencies that no longer resolve, and keeping old compilers and libraries building
- Build and utilize AI-assisted automation for triage, patch analysis, backport drafting, and regression verification, to scale the product securing process
- Build and maintain test harnesses that validate CVE patch correctness and backwards compatibility
- Provide support to customers' engineering teams on compatibility issues and upgrade paths
Required Qualifications
- Strong understanding of language runtimes and server software internals, such as Node.js, PHP, NGINX, or PostgreSQL
- Demonstrated ability to read and reason about unfamiliar low-level C and C++ code: understanding a security patch well enough to reimplement it against a different code baseline. You enjoy working with completely unfamiliar, but significant open source runtimes.
- Experience reviewing security patches for correctness, memory safety, and unintended side effects
- Deep knowledge of Linux packaging and build tooling: autotools, CMake, Make, GCC/Clang, RPM and DEB packaging, and distribution build systems (mock, pbuilder, abuild, or similar)
- Experience building and shipping software across many Linux distributions and versions, and understanding the toolchain, libc, and dependency differences between them well enough to support new distributions as they are released
- Experience with cross-compilation and multiple CPU architectures (x86_64, aarch64, armv7)
- Experience building and debugging complex software from source, including toolchain and build-system archaeology
- Practical experience using LLMs to automate real engineering work, with judgment about where automation helps and where it can't be trusted
- Strong ownership of correctness and quality: rigorous testing, regression coverage, and an instinct for what a patch might break
- Comfortable in a small, high-autonomy team where you help shape the process as much as follow it.
- Ability to take a new product from research to launch
- Comfortable being on support calls with end users of our products, to troubleshoot complex issues that customers have integrating NES into the foundations of their tech stack
- Strong communication skills, to communicate results in early product iterations, or solutions in tier-3 support capacities
Preferred Qualifications
- Background in security research, vulnerability triage, or product security
- Contributions to open source C/C++ projects. High values targets would be PHP, NGINX, PostgreSQL, Node.js, OpenSSL, or the Linux kernel
- Strong grasp of security fundamentals: CVEs, CVSS, common vulnerability classes in C (buffer overflows, use-after-free, integer overflows, format strings, DoS via resource exhaustion), and how to assess exploitability
- Familiarity with container image hardening, SBOMs, artifact signing, and supply chain security
- Experience as either a technical lead or team lead
- Experience running production services on AWS, Azure, and Kubernetes
Similar Jobs
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Analyzes source documents and converts worldwide aeronautical data into digital and graphic navigation products, including enroute charts and terminal procedures. Supports production and quality review by applying technical requirements, verifying accuracy, resolving source-data issues, and ensuring mission-ready outputs for Department of War flight operations. The role requires aviation or air navigation knowledge, independent remote work, computer proficiency, and collaboration with teammates.
Top Skills:
Bentley MicrostationComputer-Aided Design (Cad)Graphic Terminal Operations (Gto)MdaMicrosoft 365ExcelMicrosoft OutlookMicrosoft TeamsWindowsMicrosoft WordOpencities Maps
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Leads the design, development, integration, testing, debugging, and maintenance of embedded software for specialized hardware and mission systems. Translates customer requirements into software designs, improves system efficiency and stability, supports hardware integration, evaluates emerging technologies, and oversees supplier and internal software performance. The role also leads embedded software projects using Agile methodologies and requires U.S. Secret clearance eligibility.
Top Skills:
AgileDevops ToolchainEmbedded SystemsMatlabSimulink
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Leads the embedded software architecture team for Boeing’s AvionX mission systems organization. Responsibilities include directing software design, development, testing, debugging, hardware integration, requirements translation, performance improvement, compliance, supplier evaluation, and technical leadership. The role supports real-time flight management, navigation, motion planning, estimation, control, and autonomous fault protection systems, with potential certification under DO-178C.
Top Skills:
C++Do-178CEmbedded SystemsMatlabSimulink
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
