In coordination with FPF’s other engineers and researchers, the contractor will:
Conduct application security reviews across SecureDrop components.
Assist in performing threat modeling for new features and architectural changes.
Review pull requests and design documents with a focus on the security properties of new features and the security implications of architectural changes.
Assist in preparing materials for and reviewing findings from third-party security audits.
Advise on hardening strategies for SecureDrop’s deployment environments.
Review and integrate security automation tooling, such as LLMs, static code analyzers, and other tools that can mitigate or discover security vulnerabilities.
At least three-plus years experience designing or attacking secure systems (threat modeling, penetration testing, security assessments, protocol design, etc.).
Production coding experience using at least two of the following: Python, Typescript, or Rust.
Strong working knowledge of Linux systems security (kernel hardening, AppArmor, SELinux, etc.).
Experience identifying and reasoning about browser/web vulnerabilities (XSS) and Electron-specific issues (file handling, IPC, etc.).
Comfort working with open source projects in a collaborative, distributed team environment.
One-plus year of professional experience with Qubes OS, Tails, or other high-security desktop environments.
One-plus year of professional incident response experience.
Using or developing security monitoring tools (e.g., intrusion detection systems, file integrity monitoring).
Familiarity with Tor, onion services, OpenPGP, and other privacy-enhancing technologies.
This is a part-time, hourly contract — the contractor will be paid at a rate of USD $80 per hour, up to 30 hours per week, invoiced on a monthly basis. The contractor will be solely responsible for paying any and all taxes incurred as a result of their compensation.
The contract will commence on a mutually agreeable date no later than Aug. 1 for an initial duration of six months, with the possibility of renewal.
If you would like to be considered for this opportunity, please submit the following:
A brief statement of interest (one-page maximum), which includes your availability (hours per week in U.S. Eastern time and any known constraints). Please do so by including that text in the space labeled “Cover Letter.”
Please be sure to include relevant experience or examples of prior work (links to GitHub, write-ups, audits, etc.).
A CV/résumé.
...The BJC RN Career Ladder differentiates BJC as the place for nurses to work in the greater St. Louis area!~ This is a tool to empower... ...insurance* paid for by BJC ~ Annual 4% BJC Automatic Retirement Contribution ~401(k) plan with BJC match ~ Tuition Assistance...
...PurchRock is a fast-growing real estate investment company specializing in transforming... .... Position Overview: The Transaction Coordinator will manage all aspects of the real estate... ...titles, and/or mortgages Real estate license not required, but a plus Provide...
...individuals to join their team and contribute to maintaining critical infrastructure worldwide. We're currently seeking CCTV Truck Operators - PACP to join our team in Charlotte, NC. As a CCTV Truck Operator, you will beresponsible for operating remote cameras...
...kick start your career in high gear today! Department... Sales Department Supervisor. Sales Manager Summary... ...Conditions Is potentially exposed to battery acid, gasoline, chemical cleaning materials or other toxic materials commonly found in a...
...Yoga Instructor- Cape Coral Club Here We GROW Again! Are you a potential YogaInstructor and ready to leave average in the past? Be a part of one of the greatest growth stories ever told in the fitness industry. With 90+ locations currently and 100+ locations...