Staff Software Engineer
New
A
AnacondaSoftware security
Source API remote eligibility restrictions: United StatesFull-TimeStaff
SalaryThe base salary range for this role is $189,500 - $228,500, along with annual bonus potential, equity participation, and benefits.
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of professional software engineering experience; 5+ years in infrastructure, platform engineering, release engineering, or security remediation roles
- Required Skills
- PythonCI/CD
Requirements
- Have 10+ years of professional software engineering experience.
- Have 5+ years in infrastructure, platform engineering, release engineering, or security remediation roles.
- Bring strong expertise in Python and deep experience with C/C++ or other compiled languages, including native build systems and ABI debugging.
- Have hands-on packaging and build experience with conda, Python wheels, or Linux distribution packaging.
- Have experience designing and operating CI/CD, build, or release infrastructure at scale with an SRE mindset.
- Have strong command of CVE/CVSS frameworks, exploitability analysis, vulnerability scanning, and software supply chain security concepts, including SBOM, VEX, SLSA, signing, and provenance.
- Have led large cross-team technical initiatives and influenced outcomes without direct authority.
- Be able to communicate complex tradeoffs in design documents and technical reviews to technical and non-technical audiences.
- Have experience mentoring engineers at all levels.
- Be proficient with AI-powered development tools while maintaining strong engineering fundamentals.
Responsibilities
- Set technical strategy for vulnerability remediation from CVE intake through release, making risk-based decisions on patching, backporting, upgrading, or mitigation.
- Architect and build remediation infrastructure, including build and test pipelines, vulnerability scanning, signing, SBOM generation, and VEX documentation.
- Lead remediation of critical and complex CVEs involving deep dependency chains and ABI-sensitive packages.
- Improve reliability, observability, and access controls across build and release platform infrastructure.
- Define remediation SLAs and metrics that balance speed, security rigor, and engineering effort.
- Write design documents that communicate tradeoffs, support technical review, and guide cross-team implementation.
- Diagnose infrastructure root causes and advocate for investments that reduce production risk.
- Partner with upstream open-source maintainers to coordinate fixes and contribute patches.
- Use AI-powered development tools to accelerate triage, patch analysis, testing, and code review.
View Full Description & ApplyYou'll be redirected to the employer's site
