Security Developer coordinating vulnerabilities and malware issues for the Python Software Foundation. Collaborating with teams to enhance security practices and document threat models.
Responsibilities
Triage and remediate vulnerabilities in CPython and related projects in coordination with the Python core team.
Remediate malware and supply-chain attacks for projects on the Python Package Index.
Maintain and operate infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools in use by Python, like OSS-Fuzz.
Propose and develop improvements to the above workflows to scale the response to meet future demand.
Work with the Python Security Response Team and Python core team to develop and refine vulnerability and secure development practices.
Work with the Python core team to document the security and threat models for the Python programming language, standard library, and related projects.
Researching, authoring, and publishing public communications about metrics, impact, and potential future work for Python security.
Requirements
3-5 years experience with Python or C programming languages.
Knowledge about vulnerabilities affecting programs written in C, such as memory safety issues.
Asynchronous and written communication skills with the ability to manage and prioritize multiple concurrent threads.
Experience working with open source projects and communities is a plus.
Security certifications are not required.
Benefits
US employees are eligible for healthcare and other benefits
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.
Consultant cybersécurité hybride à Montréal chez I - TRACING, pure - player indépendant en sécurité informatique. Conception, déploiement et support de solutions IAM, réseau, systèmes et applications.