Security Technical Writer

Join our global team of 450+ craftspeople! We are a consultancy that solves business problems by designing and building highly complex custom software for the world's leading companies. We are on a mission to dismantle the traditional consulting ecosystem and replace it with an effective framework for innovation that transforms the way businesses think about and solve problems from the inside out.

TheoremOne is the winner of Comparably's Best Work-Life Balance: Top-Rated 100 Small/Mid-Sized Companies

https://www.comparably.com/news/best-work-life-balance-2022/

We are seeking a Security focused Technical Writer to join our team, who will help contribute to the curation of a Security Advisory Database. You will analyze, verify and fully document vulnerability reports, in order to address the problems of vulnerability uniqueness, transparency, and disclosure. The documented vulnerability information shared in the database informs developer and powers many commonly used open source tools. 

If you have a solid technical writing foundation and a passion for information security, then this role of securing open source software development might be the perfect opportunity for you.

Note that the initial engagement is a 6-month contract.

You Are a Good Fit If:

• You are passionate about helping your audience through great documentation regardless of experience level.

• You are self motivated, highly organized, and seeking a high performance culture.

• Your decisions are quick, calculated, and based in fact or backed by research.

• You enjoy organizing and searching for information.

• You have the confidence to respond to a problem with "I don't know, but I will find out!" and the knowledge and research mindset to learn.

• You have worked either within or with engineers in the security/product security space

Responsibilities and Duties - In This Role You Will:

• Ensure the completeness and correctness of the advisory data within the existing database.

• Review, fully document, curate and publish security advisories, including their descriptions, affected product data, severity, and more using our curation tooling.

• Work as part of a remote and geographically diverse team.

Required Qualifications and Skills

• Strong written and verbal communication skills in English and strong technical writing skills.

• Strong understanding of common software vulnerabilities and knowledge of secure code principles, including common versioning schemes.

• Strong understanding of open-source software development and packaged software.

• Familiarity with git and other version control software.

• Be able to provide two technical writing samples with your application. One sample must address software and code. If possible, a writing sample addressing software security and vulnerabilities should also be provided.

Preferred Qualifications

• Experience in the field of information security, system administration, or open-source software maintenance.

• Proficiency in one or more modern programming languages and their associated packaging ecosystems, such as JavaScript/npm, Java/Maven, Python/PyPI.

• Familiarity with vulnerability analysis, vulnerability trends, and using common vulnerability metrics (CVSS, CWE).

• Familiarity with evaluating the risk, impact, and severity of a vulnerability.

• Experience performing code reviews.

• Previous experience using open-source software and a strong interest in open-source security.

• Previous experience in the software security domain is a big plus, though other relevant experience will be considered as well.

• Ability to work in a team, empathy for others when they need help, and accountability when they rely on you.

Unsure if your skills meet all of our requirements?

Apply anyway! We would love to meet you and find out more about how your skills could add value. At TheoremOne, we value open communication and feedback. We believe that diversity of identity, perspective, and experience makes us stronger; we would love to hear your perspective too!

Recording disclosure

TheoremOne records interviews so that we can focus on delivering a great interview experience. If you are uncomfortable with being recorded, please let our recruiters know when they reach out to you.

About TheoremOne

Founded in 2007, TheoremOne LLC is a remote-first technology consulting company, globally distributed by design. Our services range from: 

-New product development

-Pure R & D

-Legacy modernization

-Revenue generation

-Process optimization

-Organizational transformation

If it’s cool and engaging in technology, we are likely working on it.

Customers come to us because they need to change to succeed and are looking for a solution that isn't just about technology — but also people, process, and leadership. We consult, form a diverse team of experts, and deliver strategy and execution under one roof.

Consultants come to us for the autonomy, depth of project, and challenge of working with a wide range of clients across multiple platforms and industries.

Our contributors are master puzzle solvers in a vast range of technologies.

Benefits and Perks

100% REMOTE - We're fully distributed

TEAM RETREATS - We value our face to face interaction, so our team enjoys regular retreats (on pause due to Covid-but will kick back off when safe and compliant)

EDUCATION AND CAREER GROWTH - We encourage our team to undertake any professional growth opportunities available, and we offer programs and financial assistance to achieve this!

HEALTHY BODY, HEALTHY MIND - HAPPY TEAM - We offer paid vacation and support healthy lifestyles through our physical fitness benefits program.

COMPANYWIDE VISIBILITY - We operate in a fully transparent environment to ensure we as a company and team have full understanding of where we came from, and where we are going.

HEALTHCARE & FINANCE - For US, UK, Canada, and Spain based full time employees; we have comprehensive benefits.