OSS-SIRT EngineerRole SummaryThe OSS-SIRT Engineer supports the daily operation of the OSS-SIRT by handling vulnerability intake, validation, enrichment, and maintainer coordination. This is a growth role designed to build deep expertise in open source vulnerability management and ecosystem-scale security operations.
Key Responsibilities (Years 1-2)- Triage incoming vulnerability reports and submissions
- Validate records for completeness, accuracy, and schema compliance
- Assist with maintainer and researcher communications
- Support CVE/ID requests and aliasing workflows
- Help maintain dashboards, metrics, and reporting
- Contribute to documentation, playbooks, and runbooks
Required Qualifications- 2-5 years in security engineering, application security, or open source development
- Familiarity with vulnerability lifecycles and basic disclosure practices
- Strong written communication skills
- Interest in open source communities and collaboration
Preferred Experience- Exposure to CVE, OSV, or GitHub Advisories
- Experience contributing to open source projects
- Basic scripting or data analysis skills
Success Metrics (First 24 Months)- Accurate triage and handling of submissions with minimal rework
- Growing autonomy in managing disclosures
- Demonstrated progression toward senior-level responsibilities
Additional InformationSalary: $140,000 - $155,000 USD
The Linux Foundation is unable to provide visa sponsorship for this position. Candidates must be authorized to work in their country of residence without employer sponsorship, now or in the future.
Department Large Projects Leads Role Akrites Locations Remote
