The PSF is hiring a Safety Developer-in-Residence!

The Python Software program Basis (PSF) is comfortable to announce the launch of a year-long safety enhancement initiative that may embody a safety audit and the creation of a brand new Safety Developer-in-Residence position. Beneficiant funding by the OpenSSF’s Alpha-Omega Challenge has made this work doable.

Latest open supply provide chain safety assaults on open supply tasks and infrastructure have elevated consciousness of the important position tasks like Python and the Python Bundle Index (PyPI) play in offering a secure and safe ecosystem for thousands and thousands of open supply customers. Traditionally, the Python Software program Basis’s means to make key safety enhancements has solely been realized when devoted groups of volunteers or its present infrastructure employees make time, or when it has acquired occasional grants, such because the introduction of 2FA and different safety enhancements to PyPI in 2019.

The Safety Developer-in-Residence will work full-time through the initiative to formalize present safety practices and develop into extra proactive in Python-related safety enhancements. The brand new position will likely be accountable for addressing safety points throughout PSF tasks akin to CPython and PyPI, and making use of data and experience and dealing with volunteers to implement key enhancements in a well timed method. They will even set up new processes and options that make it simpler to stop, detect, and reply to safety dangers to put a basis that makes it simpler and extra sustainable for the group to establish and deal with safety points going ahead.

The Safety Developer-in-Residence job is posted HERE. Please have a look and and share with your pals and colleagues.

This position is funded by a considerable funding from the Open Software program Safety Basis’s Alpha-Omega Challenge. The OpenSSF is a non-profit cross-industry collaboration that brings collectively leaders to enhance the safety of open supply software program by constructing a broader group, focused initiatives, and finest practices. The OpenSSF brings collectively open supply safety initiatives beneath one basis to speed up work via cross-industry assist.

The PSF is a non-profit whose mission is to advertise, defend, and advance the Python programming language, and to assist and facilitate the expansion of a various and worldwide group of Python programmers. The PSF helps the Python group utilizing company sponsorships, grants, and donations. Are you interested by sponsoring or donating to the PSF so it will probably proceed supporting Python and its group? Take a look at our sponsorship program, donate immediately right here, or contact our workforce!