Summary:Anaconda's Distribution Engineering team builds, secures, and operates the systems that produce and release packages for millions of users and thousands of enterprise customers. As supply chain security demands escalate and AI-driven workflows raise the bar, manual package-by-package remediation no longer scales. We need a Staff Software Engineer to set technical direction for vulnerability remediation at scale, architect platform infrastructure that serves our community reliably, and lead the remediation of complex CVEs that protect our users.
What You'll Do:- Set technical strategy for vulnerability remediation from CVE intake through release, making risk-based decisions on patching, backporting, upgrading, or mitigation
- Architect and build remediation infrastructure including build and test pipelines, vulnerability scanning, signing, SBOM generation, and VEX documentation
- Lead remediation of critical and complex CVEs involving deep dependency chains and ABI-sensitive packages
- Improve reliability, observability, and access controls across build and release platform infrastructure as automation and AI agent usage scales
- Define remediation SLAs and metrics that balance speed, security rigor, and engineering effort
- Write design documents that clearly communicate tradeoffs, facilitate technical review, and guide cross-team implementation
- Diagnose root causes when infrastructure breaks and advocate for technical investments that reduce production risk
- Partner with upstream open-source maintainers to coordinate fixes and contribute patches back to the community
- Use AI-powered development tools to eliminate toil and accelerate triage, patch analysis, testing, and code review
Your impact will be measured through:- Time-to-remediate for high-severity CVEs drops measurably with consistent SLA adherence
- Manual remediation effort decreases as automation scales across the package catalog
- Build and release infrastructure becomes more reliable and secure with fewer single points of failure
- Platform security improvements measurably reduce risk surface area for enterprise customers
- Engineering teams ship faster with higher confidence through improved tooling and clearer remediation status
What You Need:- 10+ years of professional software engineering experience
- 5+ years in infrastructure, platform engineering, release engineering, or security remediation roles
- Strong expertise in Python and deep experience with C/C++ or other compiled languages including native build systems and ABI debugging
- Hands-on packaging and build experience with conda, Python wheels, or Linux distribution packaging
- Experience designing and operating CI/CD, build, or release infrastructure at scale with an SRE mindset
- Strong command of CVE/CVSS frameworks, exploitability analysis, vulnerability scanning, and supply chain security concepts including SBOM, VEX, SLSA, signing, and provenance
- Track record leading large cross-team technical initiatives and influencing outcomes without direct authority
- Proven ability communicating complex tradeoffs in design documents and technical reviews to both technical and non-technical audiences
- Experience mentoring engineers at all levels and multiplying impact across teams
- Proficiency with AI-powered development tools to accelerate work while maintaining strong engineering fundamentals
What Will Make You Stand Out:- You have upstream open-source contributions or maintainer experience in widely-used projects
- You bring hands-on experience with cloud platforms like AWS or Azure, container orchestration with Kubernetes, infrastructure as code, or GitOps tooling such as ArgoCD
- You have built artifact signing, attestation, or provenance systems in production environments
- You have worked at an open-source, AI-focused, or data science company and understand the unique challenges of serving technical communities at scale
- You have thrived in fast-paced startup environments where pragmatism and tradeoffs matter more than perfection
- You push back constructively on timing and scope, asking 'why' before diving into 'how', and you advocate for technical investments that reduce long-term risk
- You embody our values: 'Curious by Default', 'Build Together', 'Own It', and 'Lead with Guts and Heart', and our behaviors: Clarity, Care and Candor
- You care deeply about fostering an environment where people of all backgrounds and experiences can flourish
Why You'll Like Working Here:- You'll thrive in a high-performance environment where results are recognized and rewarded
- Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
- You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
- You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.
The application deadline for this role is 12/30/2026;applicants will be reviewed on an ongoing basis until the role is filled.
The base salary range for this role is $189,500 - $228,500, along with annual bonus potential, equity participation, and benefits.
Our salary ranges are determined by role, level, and location. Within the range, individual compensation is determined by various factors, including work location, job-related skills, experience, and relevant education or training. Your recruiter will provide more specific details on the salary range for your preferred location during the hiring process.
In addition to base salary, we offer a comprehensive benefits package that includes:
- Flexible Vacation Policy
- Medical, Dental, and Vision Insurance
- Short Term and Long Term Disability
- Paid Parental Leave
- Monthly Wellness Stipend
- Employee Assistance Program and Mental Health Resources
