Security Developer

Details

• Triage and remediate vulnerabilities in CPython and related projects in coordination with the Python core team.
• Remediate malware and supply-chain attacks for projects on the Python Package Index.
• Maintain and operate infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools in use by Python, like OSS-Fuzz.
• Propose and develop improvements to the above workflows to scale the response to meet future demand.
• Work with the Python Security Response Team and Python core team to develop and refine vulnerability and secure development practices.
• Work with the Python core team to document the security and threat models for the Python programming language, standard library, and related projects.
• Researching, authoring, and publishing public communications about metrics, impact, and potential future work for Python security.
• Location: Global remote. Regular collaboration with US timezones will be required.
• Compensation: $70-$170K (Based on experience and local employment package norms. US employees are eligible for healthcare and other benefits)
• Term: 1 year, with possibility of renewal
• Travel: One trip per year to PyCon US.