Senior Security Engineer - California, United States - Cyber Crime

Cyber Crime California, United States

2 weeks ago

Description

The Wikimedia Foundation is looking for a Senior Security Engineer to join the Product Security team to build new security technologies to protect Wikipedia and our other projects.

This is a very hands-on engineering role working alongside our other security team members to design and code new features to protect and reassure our users and to ensure the platform remains resilient against attacks.

YOU ARE ...a smart developer with experience building security features in large-scale systems. You understand the importance of testing and documentation, and common pitfalls in developing secure web applications. You must have a passion for the WMF mission. We do (almost) everything publicly and the work we do touches thousands of editors every day.
You will be working primarily on our MediaWiki platform which powers Wikipedia.

As a top 10 website, we must meet stringent performance standards while addressing new security challenges such as supporting modern authentication technologies, detecting and preventing platform abuse from bots, and planning and rolling out improvements to our security architecture by defending against emerging security threats.

You are responsible for:
Help design and build MediaWiki security capabilities
Review and deploy security features developed by the Foundation and community members
Work with other development teams to ensure that they make safe architectural and implementation choices
Perform security maintenance and address technical debt in security-critical components
Provide support for application security incidents and operations

Skills and Experience:
Strong software engineering experience with a focus on security
Ability to work effectively in a modern, object-oriented PHP code-base
Experience in developing secure software or security-related product features
A strong interest in working with a talented security team and learning more specialist security skills such as exploiting and mitigating application-level vulnerabilities
Patience in explaining security issues and their implications on privacy and risk to non-technical audiences
Sensitivity to the security challenges faced by participants in a large, international project
Experience using Linux at the command line for tasks related to web application development and deployment
Ability to maintain focus when working remotely

Additionally, we'd love it if you have:
Experience working on anti-abuse mechanisms such as CAPTCHA and bot detection
Previous experience building security countermeasures against attacks on technologies at the web, backend and database level
Experience finding and fixing security bugs and reviewing code for security gaps
A working knowledge of threat modeling and secure design patterns
About the Wikimedia Foundation

The Wikimedia Foundation is the nonprofit organization that operates Wikipedia and the other Wikimedia free knowledge projects. Our vision is a world in which every single human can freely share in the sum of all knowledge.

We believe that everyone has the potential to contribute something to our shared knowledge, and that everyone should be able to access that knowledge freely.

We host Wikipedia and the Wikimedia projects, build software experiences for reading, contributing, and sharing Wikimedia content, support the volunteer communities and partners who make Wikimedia possible, and advocate for policies that enable Wikimedia and free knowledge to thrive.

The Wikimedia Foundation is a charitable, not-for-profit organization that relies on donations. We receive donations from millions of individuals around the world, with an average donation of about $15. We also receive donations through institutional grants and gifts. The Wikimedia Foundation is a United States 501(c)(3) tax-exempt organization with offices in San Francisco, California, USA.

As an equal opportunity employer, the Wikimedia Foundation values having a diverse workforce and continuously strives to maintain an inclusive and equitable workplace.

We encourage people with a diverse range of backgrounds to apply.

We do not discriminate against any person based upon their race, traits historically associated with race, religion, color, national origin, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, or any other legally protected characteristics.

The Wikimedia Foundation is a remote-first organization with staff members including contractors based 40+ countries * .

Salaries at the Wikimedia Foundation are set in a way that is competitive, equitable, and consistent with our values and culture.

The anticipated annual pay range of this position for applicants based within the United States is US$ 105,309 to US$ 163,646 with multiple individualized factors, including cost of living in the location, being the determinants of the offered pay.

For applicants located outside of the US, the pay range will be adjusted to the country of hire. We neither ask for nor take into consideration the salary

history of applicants. The compensation for a successful applicant will be based on their skills, experience and location.
*Please note that we are currently able to hire in the following countries:

Australia, Austria, Bangladesh, Belgium, Brazil, Canada, Colombia, Costa Rica, Croatia, Czech Republic, Denmark, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, India, Indonesia, Ireland, Israel, Italy, Kenya, Mexico, Netherlands, Nigeria, Peru, Poland, Singapore, South Africa, Spain, Sweden, Switzerland, Uganda, United Arab Emirates, United Kingdom, United States of America and Uruguay.

Our non-US employees are hired through a local third party Employer of Record (EOR).
We periodically review this list to streamline to ensure alignment with our hiring requirements.

All applicants can reach out to their recruiter to understand more about the specific pay range for their location during the interview process.

If you are a qualified applicant requiring assistance or an accommodation to complete any step of the application process due to a disability, you may contact us at or
Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr

Security Engineer

6 days ago

Owasp10 California, United States

Databook stands at the cutting edge of generative AI, driving a revolution in strategic sales and relationship management with our groundbreaking innovation, DatabookGPT. DatabookGPT represents a significant leap forward, building on the success of our Strategic Relationship Mana ...
Security Engineer II, Application Security

3 weeks ago

Amazon California, United States

Security Engineer II, Application Security · Job ID: | Services LLC · In Amazon Stores, we ship some of the widest arrays of technology found at any company. From to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the ...
Associate Security Engineer

3 weeks ago

Oportun California, United States

Oportun (Nasdaq: OPRT) is a digital banking platform that puts its 1.9 million members' financial goals within reach. With intelligent borrowing, savings, budgeting, and spending capabilities, Oportun empowers members with the confidence to build a better financial future. Since ...
Security Engineer II

3 weeks ago

NerdWallet California, United States

San Francisco, CA or Remote (Based in the U.S.) · NerdWallet · Make smarter financial decisions with NerdWallet's side-by-side comparisons, objective ratings and reviews, customized insights, and trusted expertise. · View company page · We are seeking a Security Engineer II t ...
Security Software Engineer

3 weeks ago

Oath Inc California, United States

Security Software Engineer page is loaded · Security Software Engineer · Apply · locations · Ireland - Remote · time type · Full time · posted on · Posted 9 Days Ago · job requisition id · JR · It takes powerful technology to connect our brands and partners with an aud ...
Staff Security Engineer

3 weeks ago

Everlaw California, United States

With our career opportunities we offer competitive compensation and a comprehensive benefits package that includes medical, dental, wellness program, paid parental leave, professional development, and a fully stocked kitchen. · Everlaw is looking for a Staff Security Engineer. Re ...
Sr. Security Engineer

2 weeks ago

Fdhaero California, United States

Salary Range: · $140,000.00 To 150,000.00 Annually · FDH Aero · is a trusted global supply chain partner for aerospace and defense companies. With more than 55 years of experience, it specializes in c-class components that include hardware, electrical, chemical, and consumable ...
Staff Security Engineer

3 weeks ago

Material Security, Inc. California, United States

Job Description · As a · Staff Security Engineer · at Material Security, you'll be part of an early, fast-growing team of experienced, world-class engineers. You'll be analyzing Material attack surface area, working to understand viable attack paths, and using first-class meth ...
Senior Security Engineer

3 weeks ago

Wikimedia Foundation California, United States

Senior Security Engineer · Summary · The Wikimedia Foundation is looking for a Senior Security Engineer to join the Product Security team to build new security technologies to protect Wikipedia and our other projects. This is a very hands-on engineering role working alongside o ...
Network Security Engineer

3 weeks ago

EmergencyMD California, United States

Evolver is seeking a Network Security Engineer. Candidate must be local to San Francisco Bay area to physically support installations and troubleshoot incidents at the local office communication rooms and data centers. This position will require candidate to be on an onsite/remot ...
Junior Security Engineer

1 week ago

Upwind Security, Inc. California, United States

Upwind is a place where · opportunities · happen · At Upwind, we are a team of hands-on, problem solvers and doers. · We believe in empowering organizations to run their cloud environments securely and efficiently to accelerate their businesses. · Working at Upwind is an exhil ...
Staff Security Engineer

3 weeks ago

Evidation Health California, United States

** Work from where you are · - considering candidates in San Mateo, Santa Barbara, or US-based remote** · About Evidation · Evidation creates new ways to measure and improve health in everyday life—making proactive, personalized, and truly human-centered healthcare possible. B ...
Cyber Security Engineer

1 week ago

San Francisco Bay Area Rapid Transit District (BART) California, United States

Pay Rate · Non-Represented Pay Band E07 · Annual Salary: $113, Minimum) - $172, Maximum) · The negotiable starting salary offer will be between $113,621.00/annually - $164,346.25/annually, commensurate with education and experience. · Reports To · Manager of Cyber Security · ...
Cyber Security Engineer

3 weeks ago

City of New York California, United States

The City of New York Department of Sanitation's Bureau of Information Technology (BIT) is responsible for the data processing functions and operations of systems that provide operational, analytical, and managerial support functions, as well as IT resource management, for DSNY. W ...
Network Security Engineer

1 week ago

Infojini California, United States

Job Title: Network Administrator (ITS Administrator, Sr.) · Location: Orange, 92868 California · Duration: Full time · Work Arrangement: Partial Telework-2 days in office (Tues/Thurs) · Description: · Client is seeking a highly motivated and experienced Network Administrator (ITS ...
Security Ops Infrastructure Engineer

3 weeks ago

RingCentral California, United States

Security Ops Infrastructure Engineer page is loaded · Security Ops Infrastructure Engineer · Apply · locations · Bangalore, India · time type · Full time · posted on · Posted Yesterday · job requisition id · R071315 · Say hello to possibilities. · It's not everyday tha ...
Principal Engineer, Product Security

1 week ago

Cisco California, United States

Principal Engineer, Product Security - Meraki · Location: · Area of Interest · Compensation Range · 219700 USD USD · Job Type · Professional · Cloud and Data Center · Job Id · 1414815 · At Cisco Meraki, we know that technology can connect, empower, and drive us. Our mission is t ...
Information Systems Security Engineer

2 weeks ago

Parsons Company California, United States

In a world of possibilities, pursue one with endless opportunities. Imagine NextWhen it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace wh ...
Information System Security Engineer

3 weeks ago

ActioNet California, United States

Information System Security Engineer (ISSE) · | · Req#3380 · ActioNet has an opportunity for an · Information System Security Engineer (ISSE) · requiring a · Secret clearance · located in San Diego County, CA.. ActioNet is an IT service provider and solutions integrator he ...
Information Systems Security Engineer

3 weeks ago

Parsons Oman California, United States

In a world of possibilities, pursue one with endless opportunities. Imagine Next · When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace ...