Company: Python Software Foundation
Country: Worldwide
Salary: $70,000 - $170,000
Type: Remote
Employment: Full-time
Description: Security Developer at Python Software Foundation (4 weeks ago) Work with the Python Security Response Team, Python core team, and PyPI administrators to keep Python secure. Drive vulnerability reports to remediation and advisories, mitigate malware on PyPI, and develop solutions to scale the response capacity. Core responsibilities: Triage and remediate vulnerabilities in CPython and related projects in coordination with the Python core team. Remediate malware and supply-chain attacks for projects on the Python Package Index (PyPI). Maintain and operate infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools used by Python such as OSS-Fuzz. Propose and develop improvements to security workflows to scale response to future demand. Standards/documentation/communications: Develop and refine vulnerability and secure development practices with the Python Security Response Team and Python core team. Work with the Python core team to document security/threat models for Python, the standard library, and related projects. Research, author, and publish public communications about security metrics, impact, and potential future work. Qualifications: 3–5 years experience with Python or C. Knowledge of vulnerabilities affecting C programs (e.g., memory safety issues). Strong asynchronous and written communication skills; ability to manage and prioritize multiple concurrent threads. Open source/community experience is a plus. Desired: secure development practices for Python/C; vulnerability disclosure/CVE/threat models; experience with fuzz-testing and address/memory sanitizers; technical documentation; open source/pubic collaboration. Logistics: Global remote; regular collaboration with US time zones required. Travel: one trip per year to PyCon US. Term: 1 year with possibility of renewal. Desired skills: Python, c, CPython, PyPI, OSS-Fuzz, Fuzzing, Sanitizers, CVE, Threat modeling, open source Location: Global remote (regular collaboration with US timezones) (Remote OK) Compensation: $70-$170K based on experience and local employment package norms (US healthcare/benefits eligible) Apply for this Job Other Jobs at Python Software Foundation PyPI Sustainability Engineer Python Software Foundation Global remote Remote OK $75k-$180k Posted 4 months ago Infrastructure Engineer [Closed] Python Software Foundation USA Remote OK $95K - 125K #Back end #Cloud #Database #Front end #Operations #Systems #Web Posted 6 months ago Deputy CPython Developer in Residence [Closed] Python Software Foundation Wilmington, Delaware, United States Remote OK Posted 3 years, 1 month ago Community Communications Manager [Closed] Python Software Foundation Beaverton, Oregon, US Remote OK Posted 3 years, 2 months ago Community Events Coordinator [Closed] Python Software Foundation Chicago, Illinois, US Remote OK Posted 3 years, 2 months ago Flag as spam
Apply here:
Web: Apply here
Emails:
Found 6 similar Remote jobs
Affirm
Worldwide
View Job →Join our community of over 1,000 Python developers and get instant access to the highest-paying Python jobs worldwide - from Django, Flask and FastAPI to AI and data roles. Save time with our curated job listings featuring transparent salary ranges.