Senior information security advisor securing a large organization’s networks, systems, Azure, and Microsoft 365 environments. Assessing cyber risks, controls, threats, and compliance frameworks.
About the role
- Security Researcher working with Freedom of the Press Foundation to secure SecureDrop applications. Conducting security reviews, threat modeling, and assisting with audits in a fully remote position.
Responsibilities
- Conduct application security reviews across SecureDrop components.
- Assist in performing threat modeling for new features and architectural changes.
- Review pull requests and design documents with a focus on the security properties of new features and the security implications of architectural changes.
- Assist in preparing materials for and reviewing findings from third-party security audits.
- Advise on hardening strategies for SecureDrop’s deployment environments.
- Review and integrate security automation tooling, such as LLMs, static code analyzers, and other tools that can mitigate or discover security vulnerabilities.
Requirements
- At least three-plus years experience designing or attacking secure systems (threat modeling, penetration testing, security assessments, protocol design, etc.)
- Production coding experience using at least two of the following: Python, Typescript, or Rust.
- Strong working knowledge of Linux systems security (kernel hardening, AppArmor, SELinux, etc.)
- Experience identifying and reasoning about browser/web vulnerabilities (XSS) and Electron-specific issues (file handling, IPC, etc.)
- Comfort working with open source projects in a collaborative, distributed team environment.
- One-plus year of professional experience with Qubes OS, Tails, or other high-security desktop environments (preferred).
- One-plus year of professional incident response experience (preferred).
- Using or developing security monitoring tools (e.g., intrusion detection systems, file integrity monitoring) (preferred).
- Familiarity with Tor, onion services, OpenPGP, and other privacy-enhancing technologies (preferred).
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Cybersecurity Engineer securing Blackline Safety’s worker - safety technology environment. Leading cloud, identity, infrastructure, incident response, and security automation initiatives.
Physical security specialist supporting Sun Life’s financial - services mission through threat intelligence, investigations, and incident analysis. Hybrid role engaging leaders, security partners, and emergency services.
Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
Head of Security leading Super.com's AI - first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Senior SOC Level 2 specialist protecting OLG’s lottery and gaming operations from cyber threats. Investigating incidents, containing attacks, and improving detection capabilities.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.