Staff, Product Security Engineer

Staff, Product Security Engineer

Employer: Twilio

Who we are & why we’re hiring

Twilio powers real-time business communications and data solutions that help companies and developers worldwide build better applications and customer experiences.

Although we’re headquartered in San Francisco, we have presence throughout South America, Europe, Asia and Australia. We’re on a journey to becoming a globally anti-racist, anti-oppressive, anti-bias company that actively opposes racism and all forms of oppression and bias. At Twilio, we support diversity, equity & inclusion wherever we do business. We employ thousands of Twilions worldwide, and we’re looking for more builders, creators, and visionaries to help fuel our growth momentum.

About the job

We are building out a next generation Product Security team that is focused on creating scalable solutions for a rapidly growing organization. We create tools to eliminate classes of vulnerabilities and provide the Security organization with the visibility we need to make the right decisions.

Projects that our team worked on include:

  • Made tooling to help eliminate the usage of credentials within source code or config files
  • Building tooling that help us manage and eventually eliminate the overhead of vulnerable dependencies in our applications
  • Built an unorthodox means of training our developers (this year, we taught them how to threat model to have more eyes on the architecture)
  • Created a system to identify, classify, and track sensitive data within our infrastructure in real time

About the team

We’re a diverse team of experienced security engineers with strong technical and non-technical backgrounds. We’re a passionate group of individuals who enjoy challenging traditional, prescriptive security techniques of the past and adapting or reimagining them to work with Twilio’s modern development technologies and practices. We talk about our methods and accomplishments in public blogs, at conferences, and in presentations. If you want to be this kind of security person and work with a team that’s like you to create innovative security solutions for distributed systems and architecture, we’d love to hear about your approach and introduce you to our team.

A little more about our team:

  • Our CISO’s approach to Building a Security Team and Program
  • We have talked about securing serverless architectures
  • We deleted every employees’ AWS keys!
  • We help organize the OWASP SF chapter, OWASP Vancouver chapter, the AppSec California, B-Sides SF, AppSec PNW and Day of Shecurity conferences

Qualifications

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having desired qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn’t followed a traditional path, don’t let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required

  • You have 5+ years of experience in Product Security
  • You have a solid understanding of software security principles and have experience with threat modeling
  • You can perform a code review and discover security problems
  • You have experience with automation and are not afraid of software development
  • You can break down complex security problems into measurable and solvable pieces

Desired

  • You have experience working in enterprise software and SaaS domains
  • You have run a bug bounty program
  • You have experience working with large engineering teams and codebases
  • You’re involved in the InfoSec community

Location

This role will be remote, and based in the USA or Canada.

What We Offer

There are many benefits to working at Twilio, including, in addition to competitive pay, things like generous time-off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

APPLY HERE

Senior Software Engineer, Firefox Services

Senior Software Engineer, Firefox Services

Employer: Mozilla

The Company

A lot of companies say they’re mission-driven . Our unique corporate structure guarantees that every decision we make upholds our mission: to make sure the internet stays available, safe, and welcoming to everyone. Beholden to neither shareholders nor investors, Mozilla Corporation is wholly owned by the not-for-profit Mozilla Foundation.

Along with 20,000+ volunteer contributors and collaborators all over the world, Mozilla Corporation’s staff designs, builds, and distributes software that allows people to enjoy the internet on their own terms. Our flagship product the Firefox browser has expanded into a family of products that protects users and alerts them of risks.

The Opportunity

The Contextual Services engineering team is passionate about helping Firefox users find their way on the Web by solving complex, unique, and fun Information Storage and Aggregation puzzles. We help our users get to the right information, in the right context at the right time with less effort, and we are the team responsible for making the things you see in the browser work securely, quickly, and reliably.

We’re a part of the Mozilla Firefox team; our community of engineers is geographically-distributed, and working in the open is the norm. We contribute to the code driving Firefox browser services in a number of languages, including Rust, Python, and Node.js. Our focus is on implementing and fixing things in Firefox as well as helping other teams make it excellent for our users.

As a Senior Software Engineer for Contextual Services, you can expect to write code to support new Firefox search services, as well as maintain existing core browser web services such as Sync and Push. If you are looking to make an impact on the Firefox browser, and enjoy building new services from the ground up, we’d love to hear from you.

What You’ll Get To Do

  • Design and build a system that is robust and scalable, together with a multidisciplinary team, to make the web a better place.
  • Learn about a wide variety of problems and drive solutions across a large, mature codebase.
  • Help educate engineers on other teams through code reviews, giving talks, and/or writing documentation.
  • Work with driven, committed team members to bring the open web to people around the world.

What You Bring

  • You’re comfortable reading and writing Rust, Python, and shell scripts.
  • You have experience building systems at scale.
  • You have the ability to easily switch contexts and work on several projects at the same time.
  • You have an interest in and ability to work with a distributed team (which requires good asynchronous written communication skills as well as good verbal communication skills in English).
  • You are happy to provide and receive constructive feedback; when you see a chance to improve something, you act on it.
  • You know how to approach an existing codebase and improve its architecture through small, planned interventions.

Bonus points for

  • Experience working with Actix Web, distributed databases (specifically Google Cloud Spanner, DynamoDB, Bigtable) and AWS or Google Cloud Platform.
  • Unafraid of asking questions, and proposing new ideas if you think they will make a positive impact.
  • A love of helping your colleagues grow and get better at what they do.
  • We value a variety of voices on the Contextual Services Engineering Team and at Mozilla. You don’t need to check every box on this list to apply.

APPLY HERE

Principal Site Reliability Engineer

Principal Site Reliability Engineer

Employer: Molecula

Molecula’s Engineering team is a group of brilliant makers and doers passionate about building world class products and solutions that make AI and ML possible for all. They take really challenging technical problems and turn them into elegantly simple yet incredibly complex solutions that delight our users. Most of all, they take pride in their craft and are a collaborative bunch that truly cares about the team, clients, company, and opportunity.

Molecula is looking for a Principal Site Reliability Engineer (SRE) to join our Engineering team. With your expertise in software and systems engineering, you will help us build and operate large-scale, distributed, fault-tolerant systems that will allow our users to push the boundaries on how data is accessed today. You will provide technical leadership across cross functional software, infrastructure, data, security, and product teams to ensure we deliver the most reliable and stable feature store ever.

Responsibilities include

  • Participate in design of major software components, systems, and features to improve the reliability and availability, scalability, latency, and efficiency of Molecula’s services.
  • Improve our infrastructure capabilities by guiding the definition of service level objectives for Molecula services.
  • Provide guidance to other team members on customer deployments, monitoring, observability, and capacity planning
  • Lead post-incident review and drive practices around blameless analysis, resolution, and continuous improvement work with cross-functional teams.
  • Evangelize a culture of reliability and help mentor and train other team members on designing automation in order to meet service level objectives.
  • Manage individual projects priorities, deadlines, and deliverables.
  • Work closely with Product and Software developers to ensure that security and operations are considered throughout the entire development cycle.

Job Qualifications

Minimum Qualifications

  • 10+ years of software development experience with at least 5 years focused in a DevOps or Site Reliability Engineer (SRE) role
  • Experience with Go, Rust, C, or Python, or similar programming languages
  • Experience with observability and automations for SaaS products

Preferred Qualifications

  • Bachelor’s degree in Computer Science, similar technical field of study, or equivalent practical experience.
  • Experience designing, analyzing, automating and troubleshooting large-scale distributed systems
  • Experience in networking, security, hardware or OS performance tuning
  • Experience with CI/CD pipelines such as GitLab, Azure DevOps, CircleCI to create end-to-end pipelines for all staging environments (Dev, Test, UAT, Production) is a plus.

APPLY HERE

Senior Product and Technical Recruiter

Employer: Pluralsight

Job Description:

Pluralsight is the technology workforce development company that helps teams build better products by knowing more and working better together. Using our Skills and Flow products, teams can develop critical skills, improve processes and gain insights through data.

We build this exciting product ecosystem by working with smart people and uniting behind a passion for what tech can create. We’re a group of good-natured, nimble go-getters dedicated to helping people and businesses build better with technology. That means when we see opportunities to create, we go for it. We don’t let the unknown stop us from solving challenges and winning together. And most importantly, we treat each other like adults. If you can see possibilities where others see problems, have candid conversations to ensure all voices are heard and thrive in a collaborative environment, you’ll do some of the best work of your career here.

People are our greatest asset and the Talent Acquisition team is on the forefront of finding and attracting the best of the best for Pluralsight! We are seeking someone who is passionate about recruiting for one of the most dynamic companies in the world. The Senior Product + Technical Recruiter role will impact several key teams across the company by hiring top talent. The role can be based in our Draper, UT HQ or fully remote (US based). This is the opportunity of a lifetime for someone looking to take their game to the next level and learn from a world-class recruiting team!

Who you’re committed to being:

  • You embrace Pluralsight’s mission and lead with our values.
  • You have a knack for organization and remaining attentive to detail.
  • You are a strategic partner to HRBPs, finance and hiring leaders within the organization.
  • You build vitality within the recruitment process to drive requisitions towards closure.
  • You are a strong influencer with hiring leaders.
  • You embrace accountability and strive to achieve quarterly results.
  • You are a collaborative teammate willing to work on any requisition across the board.
  • You are dependable and able to work autonomously.
  • You are committed to data integrity within our ATS and other systems.
  • You see the value of your impact within the bigger picture.

What you’ll own:

  • Manage full-cycle recruiting processes for product/tech roles with a focus on strong hiring manager partnership and candidate experience.
  • Effectively prioritize recruiting activities to successfully hire your positions to agreed deliverables.
  • Focus on Diversity, Equity and Inclusion in your hiring efforts.
  • Drive recruitment intake sessions with hiring managers and other partners to ensure requirements and interview milestones are aligned.
  • Find, engage, and activate passive candidates via sourcing methods, such as LinkedIn Recruiter and other platforms.
  • Gather market information within your department’s candidate pool to contribute to informed decision making.
  • Screen resumes and interview candidates from both active and passive markets to determine fit.
  • Facilitate interview and hiring decision-making process with interviewers and hiring managers.
  • Regularly track pipeline, priorities and performance data to share with internal partners.

Experience you’ll have:

  • The ideal candidate will have 5+ years of full cycle recruiting experience in a technology company or technology agency environment is preferred.
  • Proficient with handling 10+ job openings simultaneously.
  • Experience sourcing both passive and active candidate using effective sourcing practices and a consultative approach.
  • Strong sales ability—you have your pitch down and can pique interest and educate.
  • Sharp interview skills with ability to screen for both technical and values alignment.
  • Must be flexible & adaptable, with the ability to pick up new roles spanning both business & technology as the needs of the organization shift.
  • Ability to work with multiple organizations, prioritize based on a holistic view of business needs, and push back on partners to communicate priorities and realistic timelines.

APPLY HERE

Database Administrator III

Employer: Wikimedia Foundation

Summary

The Wikimedia Foundation is looking for a Database Administrator to join our SRE team to build, optimize and support the platform serving the world’s favorite encyclop dia to millions of people around the globe. Wikipedia and its sister projects are a globally distributed architecture powered strictly by Free and Open Source software. The stack has MediaWiki at its core and MariaDB as its data store, surrounded by an ecosystem of microservices in PHP, NodeJS, Python, Go and Java.

The Wikimedia community continuously generates text content in the form of new articles, revisions and discussions. As part of our team you would have the opportunity to solve the storage, scaling, access and backup challenges that Wikipedias’ scale provides.

We currently use self-hosted MariaDB as our main RDBMS. Our goal is configuring and managing the database infrastructure in a way that maximizes the service uptime for Wikimedia projects’ users while at the same time simplifying the operational processes, automating repeatable tasks and applying industry best practices.

We are a globally distributed and diverse team of engineers with a drive to explore, experiment and embrace new technologies. If you find what we do interesting, if you are up to the challenge of improving the reliability and delivery of one of the Internet’s top 10 websites, and you enjoy the idea of working in a remote-first role, we may be the right place for you.

You are responsible for:

  • Operate and improve the RDBMS systems serving Wikimedia projects
  • Respond to common database issues, following documented procedures
  • Collaborate with SRE and other teams across the organization to ensure their specific database needs are met on an ongoing basis
  • Perform day-to-day operational/DevOps tasks on Wikimedia’s public facing infrastructure (deployment, maintenance, configuration, troubleshooting)
  • Implement and utilize configuration management and deployment tools
  • Monitor systems, services and service clusters, optimize performance and resource utilization
  • Participate in incident response, diagnosis and follow-up on system outages or alerts across Wikimedia’s production infrastructure
  • Share our values and work in accordance with them

Skills and Experience:

  • 2+ years experience in a DBA role as part of a team
  • 3+ years experience with Linux in a production environment
  • Knowledge and experience of (Free and Open Source) RDBMS (preferably MariaDB or MySQL) administration (understanding of and experience with replication is essential) and support, debugging query performance and schema design
  • Comfortable with shell and at least one of the scripting languages used in an SRE/Operations engineering context (Python, Go, Bash, Ruby, etc.)
  • Passion for automating tasks and processes
  • Strong English language skills and ability to work independently, as an effective part of a globally distributed team
  • B.S. or M.S. in Computer Science or equivalent work experience

Additionally, we’d love it if you have:

  • Experience working with or as a part of SRE/Operations/DevOps teams
  • Experience with NoSQL products (Cassandra, Redis, Elasticsearch, etc.)
  • Experience with LAMP stack technologies (PHP/HHVM, memcached/redis, MySQL) – MediaWiki familiarity would be great!
  • Developing Free and Open Source software, or being part of an open-source community

The Wikimedia Foundation is…

…the nonprofit organization that hosts and operates Wikipedia and the other Wikimedia free knowledge projects. Our vision is a world in which every single human can freely share in the sum of all knowledge. We believe that everyone has the potential to contribute something to our shared knowledge, and that everyone should be able to access that knowledge, free of interference. We host the Wikimedia projects, build software experiences for reading, contributing, and sharing Wikimedia content, support the volunteer communities and partners who make Wikimedia possible, and advocate for policies that enable Wikimedia and free knowledge to thrive. The Wikimedia Foundation is a charitable, not-for-profit organization that relies on donations. We receive financial support from millions of individuals around the world, with an average donation of about $15. We also receive donations through institutional grants and gifts. The Wikimedia Foundation is a United States 501(c)(3) tax-exempt organization with offices in San Francisco, California, USA.

U.S. Benefits & Perks*

  • Fully paid medical, dental and vision coverage for employees and their eligible families (yes, fully paid premiums!)
  • The Wellness Program provides reimbursement for mind, body and soul activities such as fitness memberships, baby sitting, continuing education and much more
  • The 401(k) retirement plan offers matched contributions at 4% of annual salary
  • Flexible and generous time off – vacation, sick and volunteer days, plus 22 paid holidays – including the last week of the year.
  • Family friendly! 100% paid new parent leave for seven weeks plus an additional five weeks for pregnancy, flexible options to phase back in after leave, fully equipped lactation room.
  • For those emergency moments – long and short term disability, life insurance (2x salary) and an employee assistance program
  • Pre-tax savings plans for health care, child care, elder care, public transportation and parking expenses
  • Telecommuting and flexible work schedules available
  • Appropriate fuel for thinking and coding (aka, a pantry full of treats) and monthly massages to help staff relax
  • Great colleagues – diverse staff and contractors speaking dozens of languages from around the world, fantastic intellectual discourse, mission-driven and intensely passionate people

*Please note that for remote roles located outside of the U.S., we defer to our PEO (Professional Employee Organization) to ensure alignment with local labor laws.

APPLY HERE