Security Engineer

• Triage and remediate vulnerabilities in CPython and related projects in coordination with the Python core team.
• Remediate malware and supply-chain attacks for projects on the Python Package Index.
• Maintain and operate infrastructure for the Python Security Response Team, PSF CVE Numbering Authority, and security tools in use by Python, like OSS-Fuzz.
• Propose and develop improvements to the above workflows to scale the response to meet future demand.
• Work with the Python Security Response Team and Python core team to develop and refine vulnerability and secure development practices.
• Work with the Python core team to document the security and threat models for the Python programming language, standard library, and related projects.
• Researching, authoring, and publishing public communications about metrics, impact, and potential future work for Python security.

Security Developer

• Conducting in-depth research on tools or services that prevent the free collection of public web data.
• Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
• Identifying new standards and technologies that could impact our data collection capabilities.
• Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
• There’s much more…

Security Researcher – Bot Detection, Adversarial Research

• Identify and close gaps across application security, secure design review, and vulnerability management.
• Conduct threat modeling, secure design reviews, and code reviews to identify practical remediation paths.
• Partner closely with engineering teams to provide product-focused security expertise and shape a modern security program.
• Mature how we think about security in a developer-first environment, balancing pragmatism with strong technical judgment.
• Distinguish between theoretical risk and material business risk to prioritize security efforts effectively.
• Improve security posture through scalable mechanisms like tooling, automation, secure defaults, and developer-friendly guardrails.
• Support security incident response by helping triage, investigate, and coordinate remediation for product and platform security issues.
• Participate in security on-call rotations, helping respond to urgent security events with clear judgment and calm execution.
• Help manage and mature our bug bounty and vulnerability disclosure processes, including triage, validation, prioritization, and coordination with engineering teams.

Security Engineer jobs in Worldwide

See all jobs on JobTailor

Security Developer

Security Researcher – Bot Detection, Adversarial Research

Product Security Engineer