Open Society Foundations

Security Engineer

• Own security issue intake and coordination by triaging reports submitted via our established channels (including private reports through GitHub Security Advisories and our security contact process), reproducing issues where needed, coordinating fixes with maintainers, and ensuring responsible disclosure practices.
• Drive timely remediation by tracking SLAs, communicating status with reporters and internal stakeholders, and coordinating releases and backports when required.
• Harden our CI/CD and release workflows by improving build pipeline security, secrets management, artifact integrity, and access controls; and by reducing exposure to supply chain attacks.
• Strengthen supply chain defenses by improving dependency and artifact verification, provenance, signing, and monitoring; and by hardening the paths through which third-party code and integrations enter the ecosystem.
• Build preventive security practices by introducing and continuously improving security testing and scanning in our engineering workflows; including SAST/DAST where appropriate, dependency and artifact scanning, and CI/workflow static analysis.
• Coordinate external security work by scoping and managing third-party audits, pentests, and targeted reviews; and by ensuring findings are remediated effectively.
• Create and maintain security processes and documentation that are clear, repeatable, and community-friendly, including runbooks for incident response and disclosure.
• Collaborate with the community by supporting maintainers and contributors with guidance, reviewing security-relevant pull requests, and helping raise security awareness across the project.

Frontend Engineer

• Conduct code reviews of pull requests from your teammates and our community, identify and resolve technical issues, ensuring we maintain high coding standards.
• Collaborate closely with engineering, design, and product teams to develop our progressive web application for new features based on community feedback, product specifications, and requirements.
• Continuously improve our frontend codebase by elevating its quality, maintainability, and scalability, and actively participate in shaping frontend architecture and technical decisions to ensure long-term innovation and performance.
• Actively engage with our community by investigating and addressing user-reported issues, and prepare tasks that can be clearly defined and easily picked up by community contributors.