About the job
Timezone preference: GMT-5 through GMT+1
Position Overview
The Wikimedia Foundation is seeking a talented and experienced Senior Software Engineer specializing in Security & Privacy to join our dedicated Product Safety and Integrity team. In this pivotal role, you will be instrumental in developing robust security features that safeguard Wikipedia and our various projects. This hands-on engineering position involves collaboration with a dynamic team of engineers and product managers to design and implement innovative features that enhance user safety and bolster the platform's resilience against potential threats.
As a seasoned software engineer with a strong background in building security features for large-scale systems, you appreciate the significance of thorough testing and comprehensive documentation. You are aware of the common pitfalls associated with developing secure web applications and are driven by a passion for the Wikimedia Foundation's mission. Our commitment to transparency means that your work will impact thousands of editors daily.
You will primarily focus on our MediaWiki platform, which powers Wikipedia. As one of the top ten websites globally, we adhere to stringent performance standards while addressing emerging security challenges, including modern authentication technologies, bot abuse detection and prevention, and enhancing our security architecture against evolving threats.
Key Responsibilities:
- Design, develop, and deliver security features with a strong emphasis on safety and compliance.
- Collaborate with other engineering teams to ensure safe and compliant architectural choices.
- Promote a culture of transparency, empathy, and collaboration through exemplary code reviews and decision-making.
- Develop and oversee the deployment of security features crafted by the Foundation and community members.
- Conduct comprehensive internal and external security and privacy assessments.
- Manage maintenance and address technical debt in critical security and privacy components.
- Provide support for application security and privacy incidents.
Required Skills and Experience:
- 5+ years of experience as a software engineer, ideally with a focus on security or privacy.
- Proficient in modern web application development, primarily using PHP and JavaScript.
- While deep PHP expertise is not mandatory, a strong engineering background and familiarity with back-end web development is essential.

