2 days ago
Base Salary
$190k - $239k/yr
Responsibilities
- Set technical strategy for vulnerability remediation from CVE intake through package release, including patching, backporting, upgrading, and mitigation decisions.
- Architect and build remediation infrastructure for build and test pipelines, vulnerability scanning, signing, SBOM generation, and VEX documentation.
- Lead remediation of critical and complex CVEs involving deep dependency chains and ABI-sensitive packages.
- Improve reliability, observability, access controls, and automation across build and release platform infrastructure.
- Define remediation SLAs and metrics balancing remediation speed, security rigor, and engineering effort.
- Write design documents, communicate technical tradeoffs, facilitate reviews, and guide cross-team implementation.
- Diagnose infrastructure failures, reduce production risk, and advocate for long-term technical investments.
- Partner with upstream open-source maintainers to coordinate fixes and contribute patches.
- Use AI-powered development tools to accelerate triage, patch analysis, testing, and code review.
- Mentor engineers at all levels and lead large cross-team technical initiatives without direct authority.
Requirements
- 10+ years of professional software engineering experience.
- 5+ years in infrastructure, platform engineering, release engineering, or security remediation roles.
- Strong expertise in Python and deep experience with C/C++ or other compiled languages, native build systems, and ABI debugging.
- Hands-on packaging and build experience with conda, Python wheels, or Linux distribution packaging.
- Experience designing and operating CI/CD, build, or release infrastructure at scale with an SRE mindset.
- Strong command of CVE/CVSS frameworks, exploitability analysis, vulnerability scanning, and supply chain security concepts including SBOM, VEX, SLSA, signing, and provenance.
- Track record leading cross-team technical initiatives and influencing outcomes without direct authority.
- Ability to communicate complex tradeoffs in design documents and technical reviews to technical and non-technical audiences.
- Experience mentoring engineers and multiplying impact across teams.
- Proficiency with AI-powered development tools while maintaining strong engineering fundamentals.
- Preferred: upstream open-source contributions or maintainer experience in widely used projects.
- Preferred: experience with AWS or Azure, Kubernetes, infrastructure as code, GitOps tooling such as ArgoCD, or production artifact signing, attestation, or provenance systems.
Benefits
- Flexible hours and a fully remote work setup.
- Flexible Vacation Policy.
- Medical, Dental, and Vision Insurance.
- Short Term and Long Term Disability coverage.
- Paid Parental Leave.
- Monthly Wellness Stipend.
- Employee Assistance Program and Mental Health Resources.
- Annual bonus potential, equity participation, and comprehensive benefits.
- Application deadline is December 30, 2026, with ongoing review until the role is filled.
About Anaconda
Anaconda builds the open-source Anaconda Distribution and conda package manager for Python/R data science, plus enterprise tools for secure package management, governance, and AI workflows. It monetizes through commercial subscriptions, support, and training that help teams manage packages at scale and deploy notebooks and models. Founded in 2012 and headquartered in Austin, Texas, the privately held company also develops Kilo Code, a widely used AI-assisted coding extension for VS Code.