Security Developer

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Assess and address vulnerabilities in CPython and associated projects in collaboration with the Python core team.

• Address malware and supply-chain threats for projects hosted on the Python Package Index.

• Oversee and manage the infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools utilized by Python, such as OSS-Fuzz.

• Suggest and develop enhancements to the aforementioned workflows to scale responses to future demands.

• Collaborate with the Python Security Response Team and Python core team to establish and refine secure development practices and vulnerability management.

• Partner with the Python core team to document the security and threat models for the Python programming language, standard library, and related projects.

• Conduct research, write, and publish public communications regarding metrics, impacts, and prospective future initiatives for Python security.

⛳️ Requirements

• 3-5 years of experience in Python or C programming languages.

• Understanding of vulnerabilities that affect programs written in C, including memory safety issues.

• Strong asynchronous and written communication skills, with the capability to manage and prioritize multiple concurrent threads.

• Experience with open source projects and communities is advantageous.

• Security certifications are not mandatory.

🏝️ Benefits

• US employees are eligible for healthcare and various other benefits.