Security Developer

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Developer based in Brazil.** Join a globally distributed team dedicated to strengthening the security of one of the world's most widely used programming ecosystems. In this role, you will help protect open-source software by coordinating vulnerability remediation, responding to security incidents, and improving secure development practices. You'll collaborate with experienced engineers and security specialists to address emerging threats, enhance security infrastructure, and develop tools that improve response capabilities. The position offers a unique combination of hands-on security engineering, software development, technical research, and community collaboration. You'll contribute to initiatives that have a direct impact on developers and organizations worldwide while continuously expanding your expertise in application and supply chain security. This is an excellent opportunity for a security-minded developer passionate about open source and secure software development. ### Accountabilities - Investigate, triage, and coordinate the remediation of vulnerabilities affecting Python-based projects and related software components. - Identify, analyze, and mitigate malware and software supply chain threats across package repositories. - Maintain and improve security infrastructure, automation, and tooling that support vulnerability management and incident response. - Develop scalable workflows and technical solutions that enhance the efficiency of security operations and future response capabilities. - Collaborate with engineering and security teams to establish and improve secure development practices, threat models, and vulnerability management processes. - Produce technical documentation covering security architecture, vulnerability handling procedures, and best practices. - Research security trends, collect operational metrics, and contribute to technical reports and public security communications. - Participate in long-term initiatives focused on strengthening software security, improving tooling, and supporting a resilient open-source ecosystem. ## **Requirements** - 3–5 years of professional experience developing software with Python, C, or C++. - Strong understanding of software security principles and common vulnerabilities affecting applications written in C and Python, including memory safety concepts. - Experience with vulnerability management, responsible disclosure processes, CVEs, security incident response, or threat modeling. - Familiarity with secure software development practices and application security best practices. - Experience using security and code quality tools such as fuzz testing, static analysis, memory sanitizers, or similar technologies is highly desirable. - Ability to manage multiple priorities while maintaining strong written communication and technical documentation skills. - Experience contributing to open-source software projects or collaborating with distributed technical communities is an advantage. - Strong analytical thinking, problem-solving ability, and willingness to learn new security technologies and methodologies. - Collaborative mindset with the ability to work effectively across globally distributed teams and communicate clearly with technical stakeholders. - Availability to collaborate regularly with teams operating in U.S. time zones. ## **Benefits** - Competitive compensation based on experience and local employment practices. - Fully remote work environment with the flexibility to collaborate from anywhere. - Opportunity to work on globally impactful open-source security initiatives. - Exposure to cutting-edge application security, vulnerability management, and software supply chain protection. - Annual travel opportunity to attend an international technical conference. - Collaborative and inclusive engineering culture focused on cont…