Security Developer

Triage and remediate vulnerabilities in CPython and related projects in coordination with the Python core team. Remediate malware and supply-chain attacks for projects on the Python Package Index. Maintain and operate infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools in use by Python, like OSS-Fuzz. Propose and develop improvements to the above workflows to scale the response to meet future demand. Work with the Python Security Response Team and Python core team to develop and refine vulnerability and secure development practices. Work with the Python core team to document the security and threat models for the Python programming language, standard library, and related projects. Researching, authoring, and publishing public communications about metrics, impact, and potential future work for Python security. Location: Global remote. Regular collaboration with US timezones will be required. Compensation: $70-$170K (Based on experience and local employment package norms. US employees are eligible for healthcare and other benefits) Term: 1 year, with possibility of renewal Travel: One trip per year to PyCon US. The Python Software Foundation is a US 501(c)(3) non-profit corporation that holds the intellectual property rights behind the Python programming language. We also run the PyCon US conference annually, support other Python conferences/workshops around the world, and fund Python-related development with our grants program. To see more info about the PSF, check out our Annual Impact Report and public records. We believe that the future of open source must include everyone. We welcome all job-seekers regardless of race, color, ethnicity, religion, age, sexual orientation, gender identity or expression, national origin, physical appearance, body size, socio-economic, veteran or disability status. Python is a global community and the PSF aims to support a safe environment for all. More information can be found on our Code of Conduct page. Originally posted on Himalayas