Software Engineer (OSS Security)

Help us Shape the Future of Data

Anaconda is the world’s most popular data science platform. With more than 30 million users, the open source Anaconda Distribution is the easiest way to do data science and machine learning. We pioneered the use of Python for data science, championed its vibrant community, and continue to steward open source projects that make tomorrow’s innovations possible. Our enterprise-grade solutions enable corporate, research, and academic institutions around the world to harness the power of open source for competitive advantage and groundbreaking research.

Anaconda is seeking people who want to play a role in shaping the future of enterprise machine learning, and data science. Candidates should be knowledgeable and capable, but always eager to learn more and to teach others. Overall, we strive to create a culture of ability and humility and an environment that is both relaxed and focused. We stress empathy and collaboration with our customers, open source users, and each other. 

Here is what people love most about working here: We’re not just a company, we’re part of a movement. Our dedicated employees and user community are democratizing data science and creating and promoting open source technologies for a better world, and our commercial offerings make it possible for enterprise users to leverage the most innovative output from open source in a secure, governed way.

Summary

Anaconda is seeking a talented Midlevel Software Engineer (OSS Security) to join our rapidly-growing company. This is an exciting opportunity to join an industry leading software security team, and help protect the open source community and Enterprise Python users from emerging threats. Anaconda is building a team to provide security coverage across a wide range of different ecosystems and environments, and working to make the world a better, safer place.

As part of the Anaconda team, you will work with the best and brightest people in technology to monitor, triage, respond to and document new and existing vulnerabilities in open source software. The role will involve collaboration with internal teams, external partners, and upstream open source projects to identify and prioritize issues, and to track progress on remediations.

The role can also include a number of other activities, including security assessments and code reviews, internal tooling development, community engagement, security hardening and feature development, and industry collaboration.

What You’ll Do:

• Analyze, fix, and test vulnerabilities in Python packages

• Keep track of vulnerabilities in Enterprise Python package releases as they are discovered, researched and fixed (using internal software tools)

• Collaborate with other teams in the Python community and with upstream developers where appropriate, to exchange or develop vulnerability patches, and to ensure that Enterprise Python includes the very best security attributes

• Audit source code for vulnerabilities

• Backport security fixes into long term support (LTS) packages using Python and/or C/C++

What You Need:

• Minimum of 5+ years experience in a similar role

• You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them

• You are familiar with coordinated vulnerability disclosure practices

• You are familiar with open source development tools, ecosystems, and methodologies

• Significant programming experience in Python, with strong C/C++ skills highly regarded

• You are familiar with one or more of go, Rust, and/or Java

• You have excellent logic, problem-solving, troubleshooting, and decision-making skills

• You can clearly communicate and collaborate with internal teams, and Enterprise Python community members in English

• Team attitude: “I am not done, until WE are done”

• Embody our core values:  

  • Ability & Humility

  • Innovation & Action

  • Empathy & Connection

• Care deeply about fostering an environment where people of all backgrounds and experiences can flourish 

  
  

What Will Make You Stand Out:

• Experience working in a fast-paced startup environment

• Experience working in a open source or data science-oriented company

Why You’ll Like Working Here:

• Unique opportunity to translate strong open source adoption and user enthusiasm into commercial product growth

• Dynamic company that rewards high performers

• On the cutting edge of enterprise application of data science, machine learning and AI

• Collaborative team environment that values multiple perspectives and clear thinking

• Employees-first culture

• Flexible working hours

• Medical, Dental, Vision, HSA, Life and 401K (for US based candidates)

• Health and Remote working reimbursement 

• Paid parental leave - both mothers and fathers

• Pre-IPO stock options

• Open vacation policy and monthly company days off known as Snake Days

• 100% remote and flexible working policy – we embrace this fully through how we operate as a company.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.