Senior Software Engineer – Virtual Network Security Appliance (C++ / Go / Rust) Hybrid – Pune, India · Full-time, direct hire · Rust · C/C++ · Go · Linux networking · Containers · AWS The role You'll build and own Securly's edge proxy appliance: a virtual appliance (containers on a minimal Linux OS image) that we deliver into customers' school networks to intercept, inspect, and filter web traffic. You own it end to end: the traffic-handling datapath, how it's packaged and shipped, how it updates itself safely, how it fails without cutting off a network, and how the deployed fleet reports back to our AWS control plane. This is a senior role in Pune Engineering, reporting to the SVP of Engineering. You'll bring You've shipped software that runs inside a customer's network, such as a proxy, firewall, secure web gateway, VPN gateway, load balancer, or network security appliance. We're open to strong C/C++ or Go engineers whose Rust is still growing, as well as Rust engineers with appliance or proxy experience. - 8+ years of software engineering in systems, networking, or security products - Production experience in Rust, C/C++, or Go. Rust is where the new proxy is headed, so you'll write Rust here. - Network programming below the HTTP layer: TCP streams, sockets, bidirectional forwarding, transparent proxying (TPROXY), TLS, and the Linux network stack - A shipped appliance, proxy, or network security product you can name, and the problems you solved on it - Containerization and software delivery into customer networks: Docker image builds, minimal Linux images, container networking, installs and upgrades - Network security fundamentals: TLS, mTLS, certificates, and hardening systems against tampering - Performance testing and profiling: load tests, CPU/memory profiling, flame graphs - Working knowledge of AWS and infrastructure as code (CloudFormation or Terraform) Strongly preferred: production Rust (async, Tokio); Linux kernel networking (eBPF/XDP, netfilter, routing); HAProxy or Envoy; OTA or fleet management at scale; high-availability design (watchdogs, VRRP/CARP failover). Nice to have: RADIUS; fleet messaging (gRPC over mTLS, MQTT, AWS IoT Core); observability (CloudWatch, Splunk, SLO definitions); immutable OS images (Flatcar, Talos, Buildroot). What you'll build - Proxy datapath: TCP interception, transparent proxying, and TLS inspection, plus Linux network stack tuning for throughput and latency. - Appliance packaging and delivery: Container images and a minimal, immutable OS image that installs and runs cleanly inside customer networks. - Safe updates: Zero-downtime OTA updates with A/B swaps, automatic health-check rollbacks, and phased canary rollouts to machines you can't log into. - Fail-open and high availability: Watchdogs, failover, and bypass logic so the customer's internet keeps working if the appliance doesn't. - Fleet control plane: Secure, low-latency channels for policy updates and telemetry between deployed appliances and AWS. - Security hardening: Protecting the appliance against tampering and configuration drift in environments we don't own. - Performance baselines: Load tests that simulate sharp, predictable traffic spikes (everyone on the network coming online at the start of the school day), profiling, and written baselines. The technical challenges - Traffic you have to handle correctly, every time. The proxy sits in the path of all web traffic on the network. Latency, memory use, and correctness under load all matter. - Machines you can't touch. Appliances run inside networks we don't control. Updates, rollbacks, and debugging all have to work remotely, through telemetry and careful rollout design. - Failure has to be safe. If the appliance crashes or an update goes wrong, traffic must keep flowing. Designing fail-open behavior and failover is core to the job. - Every environment is different. Customer networks vary widely in hardware, firewall setups, and configuration. The appliance has to install and run cleanly across all of them. - Architecture decisions are yours. Many design choices, standards, and documents for the appliance are still to be defined. You'll make those decisions and write them down. What you'll gain - Production Rust systems experience on a high-throughput network proxy, one of the most in-demand and hardest-to-get skill sets in systems engineering. If you're coming from C/C++ or Go, you'll make that move on real production work. - End-to-end ownership of an appliance platform: datapath, OS image, update pipeline, HA, security, and fleet control plane. Most engineers only ever own one of these layers. - Architecture experience, with your design decisions and written docs shaping how the platform is built. - Hands-on depth in Linux networking and security: TPROXY, TLS inspection, eBPF/XDP, mTLS, and hardening. - Close work with a Distinguished Engineer on architecture, plus mentoring other engineers on the team. - A path toward technical leadership across the proxy and filtering platform. [confirm path] Compensation and benefits Competitive compensation, based on experience. - Comprehensive health insurance (employee, spouse, children, and parents) - Accidental and term life insurance - Learning and development reimbursement - Paid time off, plus 10+ public holidays per year - Retirement benefits (EPF and gratuity) - Parental leave (as per statutory norms) - Structured onboarding and ongoing coaching Why Securly The appliance you build filters web traffic for students in schools. Securly's technology has been credited with helping save 2,400+ student lives, and Pune engineering is where core infrastructure like this gets built, not a satellite team. Securly is the market leader in AI-powered student safety and wellness, trusted by 20M+ students across 20,000+ schools. Since launching the first cloud-based K-12 web filter in 2013, we've combined AI and human insight to help schools spot and respond to bullying, self-harm, and violence. TIME named us one of America's Top EdTech Companies 2026, and we're a GSV 150 honoree and an EdTech Top 40 "Most Used Product." Our people-first culture shows in the numbers (Source: Securly Qualtrics Employee Survey, 2025; WSA Global Benchmark): - 82% employee engagement, vs. a 73% global benchmark - 94% of employees are proud to work here - 91% rate manager effectiveness above benchmark Securly is an Equal Opportunity Employer committed to a diverse, inclusive workplace. #LI-Hybrid #LI-DO1

Senior Software Engineer – Virtual Network Security Appliance (C++ / Go / Rust)

similar openings