OSS-SIRT DevSecOps Engineer
Summary
Build and secure the OpenSSF’s Akrites vulnerability pipeline and SIRT tooling suite, managing cloud infrastructure, CI/CD, and security hardening for a global open-source security initiative.
OSS-SIRT DevSecOps Engineer
Open Source Security Foundation (OpenSSF), Linux Foundation | Remote (Global)
Preferred time zone: GMT +/- 1
Company Description
The Linux Foundation is a 501(c)(6) non-profit that provides a neutral, trusted hub for developers and organizations to code, manage, and scale open technology projects and ecosystems.
The Open Source Security Foundation (OpenSSF) is a cross-industry organization at the Linux Foundation that brings together the industry's most important open source security initiatives and the individuals and companies that support them. The OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.
Role Summary
The DevSecOps Engineer supports the day-to-day security and operational reliability of the Akrites vulnerability pipeline and OSS-SIRT infrastructure. This includes operational, design, and strategic decision-making for the SIRT tooling suite as a whole. This role absorbs and addresses the operational and security toil sustained by the growth of the tooling and its adoption.
Key Responsibilities
Secure the infrastructure — Ensure high security hardening standards and procedures are maintained throughout the SIRT tooling pipeline; develop and monitor security signals for the tooling infrastructure
Maintain and operate — Manage database infrastructure, APIs and ingestion pipelines, and CI/CD systems
Ensure SLAs are met — Monitor system health, performance, and availability; support backups, disaster recovery, and access controls
Scale with growth — Assist with scaling infrastructure to support increased usage; implement infrastructure-as-code and operational automation
Required Qualifications
5–10 years in DevSecOps, Security and/or SRE, or platform operations roles
Experience securing and running production systems with APIs and data pipelines
Familiarity with cloud platforms (GCP preferred) and CI/CD workflows on GitHub
Preferred Experience
Open source project operations
Security-sensitive environments
Experience supporting data-heavy or federated systems
Additional Information
Salary: $170,000 – $185,250 USD
All your information will be kept confidential according to EEO guidelines.
The Linux Foundation is unable to provide visa sponsorship for this position. Candidates must be authorized to work in their country of residence without employer sponsorship, now or in the future.