The Wikimedia Foundation is hiring a Senior Software Engineer (Privacy) for the Product Safety and Integrity team. In this hands-on role, you will design and implement security features to protect users and ensure the resilience of Wikipedia and other Wikimedia projects against attacks.
What You'll Do
- Help design, develop, and deliver security features with safety and security in mind
- Work with other engineering teams to ensure safe and compliant architectural and implementation choices
- Lead by example in code review, decision-making, and team culture, fostering transparency, empathy, and collaboration
- Develop, review, and deploy security features developed by the Foundation and community members
- Conduct internal and external security and privacy reviews
- Perform maintenance and address technical debt in security and privacy-critical components
- Provide support for application security and privacy incidents and operations
What We're Looking For
- 5+ years of experience as a software engineer, ideally with a focus on security or privacy
- Ability to work effectively in a modern web application, primarily PHP and JavaScript
- Experience driving technical quality and operational excellence by defining standards in testing, observability, and system reliability
- Ability to autonomously create proofs of concept, write design documents, and break down complex projects into actionable tasks
- Experience in developing secure software or security and privacy-related product features
- A strong interest in working with a security team and learning specialist skills like exploiting and mitigating application-level vulnerabilities
- Ability to explain complex security issues and their implications on privacy and risk to non-technical audiences
- Sensitivity to the security and privacy challenges faced by participants in a large, international project
- Experience working in a remote, distributed team
Nice to Have
- Experience working on anti-abuse mechanisms, such as detecting bots or coordinated activity
- Previous experience building security countermeasures against attacks on web, backend, and database technologies
- Experience finding and fixing security bugs and reviewing code for security gaps
- A working knowledge of threat modeling, secure design patterns, and privacy by design
- Prior experience with MediaWiki or Wikimedia projects
- Contributions to open-source software
Technical Stack
- PHP
- JavaScript
- MediaWiki
Team & Environment
You will join the Product Safety and Integrity team, a remote-first group within the Wikimedia Foundation.
Benefits & Compensation
- Compensation range: US$113,082 to US$175,725 for US applicants (adjusted for other countries)
Work Mode
This is a global, remote-first position. Candidates must be based in one of the following countries: Australia, Austria, Bangladesh, Belgium, Brazil, Canada, Colombia, Costa Rica, Croatia, Czech Republic, Denmark, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, India, Indonesia, Ireland, Israel, Italy, Kenya, Mexico, Netherlands, Nigeria, Peru, Poland, Singapore, South Africa, Spain, Sweden, Switzerland, Uganda, United Kingdom, United States of America, Uruguay.
As an equal opportunity employer, the Wikimedia Foundation values having a diverse workforce and continuously strives to maintain an inclusive and equitable workplace. We encourage people with a diverse range of backgrounds to apply.
