Freedom of the Press Foundation is hiring for a Senior Software Engineer

Freedom of the Press Foundation (FPF) is a non-profit organization that protects, defends, and empowers public-interest journalism in the 21st century.

Job details

Location

U.S.-based remote

Salary

$110,000-120,000, depending on experience.

Hours of work

Full-time

Contract

Permanent

Responsibilities

  • Adding new features to SecureDrop Workstation, such as workflows for redacting and sanitizing documents
  • Building out server API functionality to support SecureDrop Workstation development
  • Performing code reviews for contributions from the development team and the larger SecureDrop community
  • Testing the security properties of current and proposed functionality/architecture using quantitative threat models and other techniques
  • Prototyping client-side encryption for journalist and source communication
  • Working with external collaborators — for example, UX consultants during development of new features, or researchers studying SecureDrop or other privacy-enhancing technologies
  • Taking turns on maintenance and release tasks with the rest of the team
  • Other responsibilities as assigned by the engineering manager, SecureDrop

Qualifications

Must Have

  • Solid experience in Python or Rust, and experience in one or more of these focus areas:
    • Security-focused application development
    • Desktop GUI development (preferably using Qt or another Linux-compatible framework)
    • DevOps, automation, and release management
    • Design and implementation of secure communication protocols
  • 5-plus years of experience as a software engineer in a production environment, or equivalent experience
  • Experience with Git, continuous integration, build automation, and test-driven development
  • Experience working as part of collaborative team processes, including routine peer review of code contributions
  • A passion for protecting the press freedom rights of all

Preferred

  • Threat modeling, penetration testing, vulnerability management, and incident response
  • Qubes, Tails, Tor, and other privacy/security technologies
  • Creating design specifications and building consensus through clear verbal and written communication within a distributed engineering team
  • Experience developing technologies to support activist, journalist, or civil society communities