Principal Software Engineer - C/C++

 

OpenLogic, a Perforce business unit, provides long-term support (LTS) for enterprise Linux distributions - including CentOS 6, 7, and 8 - to customers who depend on stable, security-patched software beyond end-of-life. As a Senior Software Engineer on the CentOS CVE Remediation team, you will own the full lifecycle of CVE fixes: triaging vulnerabilities, backporting upstream patches, rebuilding RPM packages, validating fixes, and delivering hardened packages to production. You will work across a broad range of system packages — kernel, OpenSSL, openldap, libxml2, Ruby, MySQL, and others — making deep C/C++ expertise essential.

12+ years of professional C and C++ development and system admin level experience on Linux systems.

RPM packaging expertise — Hands-on experience with RPM packaging:

Writing and maintaining .spec files, understanding of rpm build phases and macros

Building in isolated environments using mock; managing dist tags and dependencies

Deep Linux internals – Strong Linux internals knowledge:

Kernel subsystems (memory management, process scheduling, file systems, networking stack)

System calls, device drivers, and kernel module development fundamentals

Package management proficiency with yum/dnf and familiarity with rpm database operations

Practical debugging skills: gdb, strace, ltrace, valgrind, core dump analysis

Scripting in Bash and Python for build automation and tooling

Familiarity with SELinux policy analysis and enforcement modes

Experience with git and git-lfs for patch management and source control

Prior experience backporting security patches for EOL distributions (CentOS, RHEL, Oracle Linux, Rocky, AlmaLinux)

Knowledge of OpenSSL, libxml2, openldap, or Ruby C extensions at the source level

Familiarity with CVSS v3/v4 scoring, EPSS, and KEV prioritization workflows

Experience with virtualization tooling: libvirt, QEMU/KVM, Vagrant, VirtualBox

CI/CD pipeline experience (Jenkins, GitHub Actions) for automated package builds

Understanding of networking layers (L2/L3), socket programming, and network-facing service hardening

Exposure to CIS Benchmarks or DISA STIGs for hardened image configuration

All employees are expected to demonstrate AI fluency appropriate to their role and level, including responsible use of AI tools, sound judgment, and adherence to company AI governance and security policy standards.

Come work with us! Our team members are valued for their contributions, introduced to new opportunities, and rewarded well. Perforce combines the experience and rewards of a start-up with the security of an established and privately held profitable company.