About the job
Timezone preference: GMT-5 through GMT+1
About the Role
The Wikimedia Foundation is seeking a skilled Senior Software Engineer to join our Product Safety and Integrity team. In this pivotal role, you will be instrumental in developing innovative security features that safeguard Wikipedia and our other projects. This position demands a hands-on approach, collaborating closely with fellow engineers and product managers to design and implement features that enhance user safety and bolster the platform's resilience against various threats.
As an experienced software engineer, you possess a deep understanding of building security features in large-scale systems. Your expertise includes the significance of thorough testing and documentation, as well as the common challenges encountered in developing secure web applications. Your commitment to the Wikimedia Foundation's mission is paramount, as our operations are characterized by transparency, impacting thousands of editors daily.
In this role, you will primarily focus on our MediaWiki platform, which underpins Wikipedia. Given its status as a top 10 website, we must adhere to rigorous performance standards while tackling emerging security challenges, such as modern authentication technologies, bot abuse detection and prevention, and enhancing our security architecture to defend against evolving threats.
Your Responsibilities Include:
- Designing, developing, and delivering security features with a focus on safety and security.
- Collaborating with other engineering teams to ensure safe and compliant architectural and implementation choices.
- Leading by example in code reviews, decision-making, and nurturing a team culture that emphasizes transparency, empathy, and collaboration.
- Reviewing and deploying security features developed by the Foundation and community contributors.
- Conducting internal and external security and privacy assessments.
- Maintaining and addressing technical debt in components critical to security and privacy.
- Providing support for application security and privacy incidents and operations.

