Senior Software Engineer

Summary

Join Freedom of the Press Foundation (FPF) as a Senior Software Engineer and contribute to the SecureDrop project, a crucial open-source whistleblower submission system used globally by news organizations. Working remotely as part of a small, international team, you will focus on enhancing SecureDrop Workstation's functionality while maintaining SecureDrop Server. This role involves adding new features, building server API functionality, performing code reviews, testing security, prototyping encryption, and collaborating with external partners. The ideal candidate possesses extensive experience in Python or Rust, security-focused development, and GUI development, along with a passion for press freedom. FPF offers a competitive salary and benefits package.

Requirements

• Solid experience in Python or Rust, and experience in one or more of these focus areas: Security-focused application development; Desktop GUI development (preferably using Qt or another Linux-compatible framework); DevOps, automation, and release management; Design and implementation of secure communication protocols
• 5-plus years of experience as a software engineer in a production environment, or equivalent experience
• Experience with Git, continuous integration, build automation, and test-driven development
• Experience working as part of collaborative team processes, including routine peer review of code contributions
• A passion for protecting the press freedom rights of all

Responsibilities

• Add new features to SecureDrop Workstation, such as workflows for redacting and sanitizing documents
• Build out server API functionality to support SecureDrop Workstation development
• Perform code reviews for contributions from the development team and the larger SecureDrop community
• Test the security properties of current and proposed functionality/architecture using quantitative threat models and other techniques
• Prototype client-side encryption for journalist and source communication
• Work with external collaborators — for example, UX consultants during development of new features, or researchers studying SecureDrop or other privacy-enhancing technologies
• Take turns on maintenance and release tasks with the rest of the team
• Other responsibilities as assigned by the engineering manager, SecureDrop

Preferred Qualifications

• Threat modeling, penetration testing, vulnerability management, and incident response
• Qubes, Tails, Tor, and other privacy/security technologies
• Creating design specifications and building consensus through clear verbal and written communication within a distributed engineering team
• Experience developing technologies to support activist, journalist, or civil society communities

Benefits

• Full-time role with a competitive nonprofit salary in the range of $110,000-120,000, depending on experience
• This position is available to all U.S.-based remote candidates