Cryptography Engineer
Role details
Job location
Tech stack
Job description
Freedom of the Press Foundation (FPF), a nonprofit organization dedicated to protecting, defending, and empowering public-interest journalism, is hiring a cryptography engineer to join its SecureDrop development team. Reporting to the engineering manager for SecureDrop, this position is a unique opportunity to be part of a small, primarily remote, and internationally distributed team that is making it possible for newsrooms to manage their most sensitive submissions, from the next big story about abuse of government power to the exposure of corruption at the local level., * Designing and specifying extensions to the SecureDrop end-to-end encryption protocol for new security properties or features (e.g., implementing abuse-resistance features).
- Contributing to the formal modeling of the SecureDrop end-to-end encryption protocol.
- Implementing client-side encryption for journalist and source communication.
- Working with the rest of the team to integrate the protocol into the SecureDrop source and journalist workflows.
- Performing code reviews for contributions from the development team and the larger SecureDrop community.
- Testing the security properties of current and proposed functionality/architecture.
- Working with external collaborators - for example, UX consultants during development of new features, or academic researchers studying SecureDrop or other privacy-enhancing technologies.
- Taking turns on maintenance and release tasks with the rest of the team.
- Other responsibilities as assigned by the SecureDrop engineering manager.
Requirements
Do you have experience in Rust (programming language)?, Do you have a Master's degree?, * One-plus years of substantial Rust experience, in production, research, or open source projects.
- Either (a) five-plus years of full-time experience as a software engineer in a production environment, (b) a master's degree with three-plus years of full-time experience as a software engineer in a production environment, or (c) a Ph.D. with one-plus year of substantial coding experience, plus some industry or open source software development experience.
- Experience designing or implementing cryptographic protocols.
- Strong written communication skills for protocol specifications and technical documentation.
- Experience with Git, continuous integration, build automation, and test-driven development.
- Experience working as part of collaborative team processes, including routine peer review of code contributions.
- A passion for protecting the press freedom rights of all., * Familiarity with formal modeling tools (Tamarin, ProVerif, or similar).
- Interest in keeping up with the state-of-the-art in testing and verification techniques.
- Experience with academic or industry cryptography research.
- Experience with threat modeling, auditing, and vulnerability management.
- Experience implementing cryptography in web environments.
- Experience with Qubes, Tails, Tor, or other privacy/security technologies.
- Contributions to open source software, especially cryptographic libraries or protocol implementations.
- Experience developing technologies to support activist, journalist, or civil society communities.
Working with us
Benefits & conditions
This is a full-time role with a competitive nonprofit salary in the range of $120,000-140,000, depending on experience. This position is available to all U.S.-based remote candidates. For more information on our full benefits package, please visit our website's careers page. FPF does not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual or reproductive health decisions, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status, and other personal characteristics protected by law.