Senior Application Security Engineer

August 6

Apply Now

Receive Emails with Similar Jobs

Wikimedia Foundation

WebsiteLinkedInAll Job Openings

Imagine a world in which every single human being can freely share in the sum of all knowledge.

Non-Profit • Free knowledge • Open Source Culture • Internet • Technology

501 - 1000

💰 $2.5M Grant on 2019-09

Description

• Triaging and remediating reported security issues • Reviewing and deploying features developed by the Foundation and community members • Working with other development teams to ensure safe architectural and implementation choices • Constantly probing and abusing software to find bugs before attackers do • Providing application security concept reviews and helping socialize application security best practices • Providing support for application security incidents and operations

Requirements

• +5 years of application security experience, including a thorough understanding of issues documented in the OWASP Top Ten and CWE Top 25 • Strong understanding of modern, object-oriented PHP development • In-depth experience developing or auditing client-side JavaScript • Demonstrated ability to exploit and mitigate application-level vulnerabilities • Experience conducting software security reviews using a combination of source code inspection, manual testing, and automated scanning • Sensitivity to the security challenges faced by participants in a large, international project • Strong understanding of cryptography as applied to web application security (encryption, hashing, PKI management), including analysis and implementation • Experience using Linux at the command line for tasks related to web application development and deployment