Senior Security Engineer - California, United States - Wikimedia Foundation

Wikimedia Foundation California, United States

3 weeks ago

Description

Senior Security Engineer

Summary

The Wikimedia Foundation is looking for a Senior Security Engineer to join the Product Security team to build new security technologies to protect Wikipedia and our other projects.

This is a very hands-on engineering role working alongside our other security team members to design and code new features to protect and reassure our users and to ensure the platform remains resilient against attacks.

YOU ARE ...a smart developer with experience building security features in large-scale systems. You understand the importance of testing and documentation, and common pitfalls in developing secure web applications. You must have a passion for the WMF mission. We do (almost) everything publicly and the work we do touches thousands of editors every day.

You will be working primarily on our MediaWiki platform which powers Wikipedia.

As a top 10 website, we must meet stringent performance standards while addressing new security challenges such as supporting modern authentication technologies, detecting and preventing platform abuse from bots, and planning and rolling out improvements to our security architecture by defending against emerging security threats.

You are responsible for:
Help design and build MediaWiki security capabilities

Review and deploy security features developed by the Foundation and community members

Work with other development teams to ensure that they make safe architectural and implementation choices

Perform security maintenance and address technical debt in security-critical components

Provide support for application security incidents and operations

Skills and Experience:
Strong software engineering experience with a focus on security

Ability to work effectively in a modern, object-oriented PHP code-base

Experience developing client-side JavaScript

Experience in developing secure software or security-related product features

A strong interest in working with a talented security team and learning more specialist security skills such as exploiting and mitigating application-level vulnerabilities

Patience in explaining security issues and their implications on privacy and risk to non-technical audiences

Sensitivity to the security challenges faced by participants in a large, international project

Experience using Linux at the command line for tasks related to web application development and deployment

Ability to maintain focus when working remotely

Additionally, we'd love it if you have:

Experience working on anti-abuse mechanisms such as CAPTCHA and bot detection

Previous experience building security countermeasures against attacks on technologies at the web, backend and database level

Experience finding and fixing security bugs and reviewing code for security gaps

A working knowledge of threat modeling and secure design patterns

About the Wikimedia Foundation
The Wikimedia Foundation is the nonprofit organization that operates Wikipedia and the other Wikimedia free knowledge projects. Our vision is a world in which every single human can freely share in the sum of all knowledge.

We believe that everyone has the potential to contribute something to our shared knowledge, and that everyone should be able to access that knowledge freely.

We host Wikipedia and the Wikimedia projects, build software experiences for reading, contributing, and sharing Wikimedia content, support the volunteer communities and partners who make Wikimedia possible, and advocate for policies that enable Wikimedia and free knowledge to thrive.

The Wikimedia Foundation is a charitable, not-for-profit organization that relies on donations. We receive donations from millions of individuals around the world, with an average donation of about $15. We also receive donations through institutional grants and gifts. The Wikimedia Foundation is a United States 501(c)(3) tax-exempt organization with offices in San Francisco, California, USA.

As an equal opportunity employer, the Wikimedia Foundation values having a diverse workforce and continuously strives to maintain an inclusive and equitable workplace.

We encourage people with a diverse range of backgrounds to apply.

We do not discriminate against any person based upon their race, traits historically associated with race, religion, color, national origin, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, or any other legally protected characteristics.

The Wikimedia Foundation is a remote-first organization with staff members including contractors based 40+ countries * .

Salaries at the Wikimedia Foundation are set in a way that is competitive, equitable, and consistent with our values and culture.

The anticipated annual pay range of this position for applicants based within the United States is US$

105,309

to US$

163,646

with multiple individualized factors, including cost of living in the location, being the determinants of the offered pay. For applicants located outside of the US, the pay range will be adjusted to the country of hire. We neither ask for nor take into consideration the salary history of applicants. The compensation for a successful applicant will be based on their skills, experience and location.

*Please note that we are currently able to hire in the following countries:

Australia, Austria, Bangladesh, Belgium, Brazil, Canada, Colombia, Costa Rica, Croatia, Czech Republic, Denmark, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, India, Indonesia, Ireland, Israel, Italy, Kenya, Mexico, Netherlands, Nigeria, Peru, Poland, Singapore, South Africa, Spain, Sweden, Switzerland, Uganda, United Arab Emirates, United Kingdom, United States of America and Uruguay.

Our non-US employees are hired through a local third party Employer of Record (EOR).

We periodically review this list to streamline to ensure alignment with our hiring requirements.

All applicants can reach out to their recruiter to understand more about the specific pay range for their location during the interview process.

If you are a qualified applicant requiring assistance or an accommodation to complete any step of the application process due to a disability, you may contact us at or

More information

U.S. Benefits & Perks
Wikimedia Foundation
Applicant Privacy Policy
News from across the Wikimedia movement
Blog
Wikimedia 2030
Our Commitment to Equity
This is Wikimedia Foundation
Facts Matter
Our Projects
Our Tech Stack

#J-18808-Ljbffr

Security Engineer

6 days ago

Owasp10 California, United States

Databook stands at the cutting edge of generative AI, driving a revolution in strategic sales and relationship management with our groundbreaking innovation, DatabookGPT. DatabookGPT represents a significant leap forward, building on the success of our Strategic Relationship Mana ...
Security Engineer II, Application Security

3 weeks ago

Amazon California, United States

Security Engineer II, Application Security · Job ID: | Services LLC · In Amazon Stores, we ship some of the widest arrays of technology found at any company. From to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the ...
Associate Security Engineer

3 weeks ago

Oportun California, United States

Oportun (Nasdaq: OPRT) is a digital banking platform that puts its 1.9 million members' financial goals within reach. With intelligent borrowing, savings, budgeting, and spending capabilities, Oportun empowers members with the confidence to build a better financial future. Since ...
Staff Security Engineer

3 weeks ago

Material Security, Inc. California, United States

Job Description · As a · Staff Security Engineer · at Material Security, you'll be part of an early, fast-growing team of experienced, world-class engineers. You'll be analyzing Material attack surface area, working to understand viable attack paths, and using first-class meth ...
Security Engineer II

3 weeks ago

NerdWallet California, United States

San Francisco, CA or Remote (Based in the U.S.) · NerdWallet · Make smarter financial decisions with NerdWallet's side-by-side comparisons, objective ratings and reviews, customized insights, and trusted expertise. · View company page · We are seeking a Security Engineer II t ...
Junior Security Engineer

1 week ago

Upwind Security, Inc. California, United States

Upwind is a place where · opportunities · happen · At Upwind, we are a team of hands-on, problem solvers and doers. · We believe in empowering organizations to run their cloud environments securely and efficiently to accelerate their businesses. · Working at Upwind is an exhil ...
Staff Security Engineer

3 weeks ago

Evidation Health California, United States

** Work from where you are · - considering candidates in San Mateo, Santa Barbara, or US-based remote** · About Evidation · Evidation creates new ways to measure and improve health in everyday life—making proactive, personalized, and truly human-centered healthcare possible. B ...
Security Software Engineer

3 weeks ago

Oath Inc California, United States

Security Software Engineer page is loaded · Security Software Engineer · Apply · locations · Ireland - Remote · time type · Full time · posted on · Posted 9 Days Ago · job requisition id · JR · It takes powerful technology to connect our brands and partners with an aud ...
Sr. Security Engineer

2 weeks ago

Fdhaero California, United States

Salary Range: · $140,000.00 To 150,000.00 Annually · FDH Aero · is a trusted global supply chain partner for aerospace and defense companies. With more than 55 years of experience, it specializes in c-class components that include hardware, electrical, chemical, and consumable ...
Staff Security Engineer

3 weeks ago

Everlaw California, United States

With our career opportunities we offer competitive compensation and a comprehensive benefits package that includes medical, dental, wellness program, paid parental leave, professional development, and a fully stocked kitchen. · Everlaw is looking for a Staff Security Engineer. Re ...
Senior Security Engineer

2 weeks ago

Cyber Crime California, United States

The Wikimedia Foundation is looking for a Senior Security Engineer to join the Product Security team to build new security technologies to protect Wikipedia and our other projects. This is a very hands-on engineering role working alongside our other security team members to desig ...
Network Security Engineer

3 weeks ago

EmergencyMD California, United States

Evolver is seeking a Network Security Engineer. Candidate must be local to San Francisco Bay area to physically support installations and troubleshoot incidents at the local office communication rooms and data centers. This position will require candidate to be on an onsite/remot ...
Cyber Security Engineer

1 week ago

San Francisco Bay Area Rapid Transit District (BART) California, United States

Pay Rate · Non-Represented Pay Band E07 · Annual Salary: $113, Minimum) - $172, Maximum) · The negotiable starting salary offer will be between $113,621.00/annually - $164,346.25/annually, commensurate with education and experience. · Reports To · Manager of Cyber Security · ...
Network Security Engineer

1 week ago

Infojini California, United States

Job Title: Network Administrator (ITS Administrator, Sr.) · Location: Orange, 92868 California · Duration: Full time · Work Arrangement: Partial Telework-2 days in office (Tues/Thurs) · Description: · Client is seeking a highly motivated and experienced Network Administrator (ITS ...
Cyber Security Engineer

3 weeks ago

City of New York California, United States

The City of New York Department of Sanitation's Bureau of Information Technology (BIT) is responsible for the data processing functions and operations of systems that provide operational, analytical, and managerial support functions, as well as IT resource management, for DSNY. W ...
Security Ops Infrastructure Engineer

3 weeks ago

RingCentral California, United States

Security Ops Infrastructure Engineer page is loaded · Security Ops Infrastructure Engineer · Apply · locations · Bangalore, India · time type · Full time · posted on · Posted Yesterday · job requisition id · R071315 · Say hello to possibilities. · It's not everyday tha ...
Information Systems Security Engineer

3 weeks ago

Parsons Oman California, United States

In a world of possibilities, pursue one with endless opportunities. Imagine Next · When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace ...
Cyber Security Engineer, Senior

6 days ago

Booz Allen Hamilton California, United States

Are you looking for an opportunity to combine your te chn ical skills with big picture thi nk ing to make an impact in the DoD? You understand your customer's environment and how to develop the right systems for their mission. Your ability to translate real-world needs into te ch ...
Senior Application Security Engineer

1 week ago

Raso360 California, United States

The company is the leader in transforming diabetes care and management by providing CGM technology to help patients and healthcare professionals better manage diabetes. The company reported full-year 2022 revenues of $2.9B, a growth of 18% over 2021. Headquartered in San Diego, C ...
Information Systems Security Engineer

2 weeks ago

Parsons Company California, United States

In a world of possibilities, pursue one with endless opportunities. Imagine NextWhen it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace wh ...