What are the responsibilities and job description for the OSS-SIRT Engineer, Akrites position at The Linux Foundation?
OSS-SIRT Engineer
Company Description
The Linux Foundation is a 501(c)(6) non-profit that provides a neutral, trusted hub for developers and organizations to code, manage, and scale open technology projects and ecosystems.
The Open Source Security Foundation (OpenSSF) is a cross-industry organization at the Linux Foundation that brings together the industry's most important open source security initiatives and the individuals and companies that support them. The OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.
Defend Critical Open Source Software Against AI-Enabled Cyber Threats
Akrites is a coordinated effort to remediate and disclose vulnerabilities in critical open source software. As part of this effort, we are deploying a pipeline to process large volumes of vulnerability reports, from intake to assessment and disclosure. Join our team to help secure open source software at this critical moment in time.
Role Summary
The OSS-SIRT Engineer supports the daily operation of the OSS-SIRT by handling vulnerability intake, validation, enrichment, and maintainer coordination. This is a growth role designed to build deep expertise in open source vulnerability management and ecosystem-scale security operations.
Key Responsibilities (Years 1-2)
Triage incoming vulnerability reports and submissions
Validate records for completeness, accuracy, and schema compliance
Assist with maintainer and researcher communications
Support CVE/ID requests and aliasing workflows
Help maintain dashboards, metrics, and reporting
Contribute to documentation, playbooks, and runbooks
Required Qualifications
2-5 years in security engineering, application security, or open source development
Familiarity with vulnerability lifecycles and basic disclosure practices
Strong written communication skills
Interest in open source communities and collaboration
Preferred Experience
Exposure to CVE, OSV, or GitHub Advisories
Experience contributing to open source projects
Basic scripting or data analysis skills
Success Metrics (First 24 Months)
Accurate triage and handling of submissions with minimal rework
Growing autonomy in managing disclosures
Demonstrated progression toward senior-level responsibilities
Additional Information
Salary: $140,000 - $155,000 USD
All your information will be kept confidential according to EEO guidelines.
The Linux Foundation is unable to provide visa sponsorship for this position. Candidates must be authorized to work in their country of residence without employer sponsorship, now or in the future.
Salary : $140,000 - $155,000