Staff Software Security Engineer (PHP)
Job Description
Hiring in the following European locations: Austria, Belgium, Colombia, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Ireland, Italy, Netherlands, Poland, Spain, Sweden, Switzerland, United Kingdom.
Summary
The Wikimedia Foundation is looking for a Staff Security Software Engineer to join the Product Security team to build new security technologies to protect Wikipedia and our other projects. This is a very hands-on engineering role working alongside our other security team members to design and code new features to protect and reassure our users and to ensure the platform remains resilient against attacks.
YOU ARE ...a smart developer with experience building security features in large-scale systems. You understand the importance of testing and documentation, and common pitfalls in developing secure web applications. You have a passion for the WMF mission. We do (almost) everything publicly and the work we do touches thousands of editors every day.
You will be working primarily on our MediaWiki platform which powers Wikipedia. As a top 10 website, we must meet stringent performance standards while addressing new security challenges such as supporting modern authentication technologies, detecting and preventing platform abuse from bots, and planning and rolling out improvements to our security architecture by defending against emerging security threats.
You are responsible for:
- Help design and build MediaWiki security capabilities
- Mentor and lead a security development team
- Review and deploy security features developed by the Foundation and community members
- Work with other development teams to ensure that they make safe architectural and implementation choices
- Perform security maintenance and address technical debt in security-critical components
- Provide support for application security incidents and operations
Skills and Experience:
The right person is better than the right set of experiences, these are the traits we’ve identified that make great additions to our team so far.
- +8 years of experience in the software engineering area with a focus on security
- Ability to work effectively in a modern, object-oriented PHP code-base
- Experience developing client-side JavaScript
- Experience in developing secure software or security-related product features
- A strong interest in working with a talented security team and learning more specialist security skills such as exploiting and mitigating application-level vulnerabilities
- Patience in explaining security issues and their implications on privacy and risk to non-technical audiences
- Sensitivity to the security challenges faced by participants in a large, international project
- Experience using Linux at the command line for tasks related to web application development and deployment
- Ability to maintain focus when working remotely
Additionally, we’d love it if you have:
- Experience working on anti-abuse mechanisms such as CAPTCHA and bot detection
- Previous experience building security countermeasures against attacks on technologies at the web, backend, and database level
- Experience finding and fixing security bugs and reviewing code for security gaps
- A working knowledge of threat modeling and secure design patterns
About the Wikimedia Foundation
The Wikimedia Foundation is the nonprofit organization that operates Wikipedia and the other Wikimedia free knowledge projects. Our vision is a world in which every single human can freely share in the sum of all knowledge. We believe that everyone has the potential to contribute something to our shared knowledge, and that everyone should be able to access that knowledge freely. We host Wikipedia and the Wikimedia projects, build software experiences for reading, contributing, and sharing Wikimedia content, support the volunteer communities and partners who make Wikimedia possible, and advocate for policies that enable Wikimedia and free knowledge to thrive.
The Wikimedia Foundation is a charitable, not-for-profit organization that relies on donations. We receive donations from millions of individuals around the world, with an average donation of about $15. We also receive donations through institutional grants and gifts. The Wikimedia Foundation is a United States 501(c)(3) tax-exempt organization with offices in San Francisco, California, USA.
As an equal opportunity employer, the Wikimedia Foundation values having a diverse workforce and continuously strives to maintain an inclusive and equitable workplace. We encourage people with a diverse range of backgrounds to apply. We do not discriminate against any person based upon their race, traits historically associated with race, religion, color, national origin, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, or any other legally protected characteristics.
The Wikimedia Foundation is a remote-first organization with staff members including contractors based 40+ countries*. Salaries at the Wikimedia Foundation are set in a way that is competitive, equitable, and consistent with our values and culture. The anticipated annual pay range of this position for applicants based within the United States is US$129,347 to US$ 200,823 with multiple individualized factors, including cost of living in the location, being the determinants of the offered pay. For applicants located outside of the US, the pay range will be adjusted to the country of hire. We neither ask for nor take into consideration the salary history of applicants. The compensation for a successful applicant will be based on their skills, experience and location.
*Please note that we are currently able to hire in the following countries: Australia, Austria, Bangladesh, Belgium, Brazil, Canada, Colombia, Costa Rica, Croatia, Czech Republic, Denmark, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, India, Indonesia, Ireland, Israel, Italy, Kenya, Mexico, Netherlands, Nigeria, Peru, Poland, Singapore, South Africa, Spain, Sweden, Switzerland, Uganda, United Arab Emirates, United Kingdom, United States of America and Uruguay. Our non-US employees are hired through a local third party Employer of Record (EOR).
We periodically review this list to streamline to ensure alignment with our hiring requirements.
All applicants can reach out to their recruiter to understand more about the specific pay range for their location during the interview process.
If you are a qualified applicant requiring assistance or an accommodation to complete any step of the application process due to a disability, you may contact us at [email protected] or +1 (415) 839-6885.
More information
U.S. Benefits & Perks
Wikimedia Foundation
Applicant Privacy Policy
News from across the Wikimedia movement
Blog
Wikimedia 2030
Our Commitment to Equity
This is Wikimedia Foundation
Facts Matter
Our Projects
Our Tech Stack
More job openings
Senior Contract Recruiter
Are you a skilled recruiter with high volume experience in the fintech industry? Are you looking for a challenging and dynamic contract role that allows you to work flexibly for 6 months? Look no further!
Tasks
Our fintech client, is seeking a Senior Contract Recruiter in Europe to join their team during a time of change and growth. As the company continues to expand and evolve, our client needs a talented and driven individual to assist in finding the best candidates for all open positions.
As a Contract Recruiter, you will play a crucial role in identifying, attracting, and hiring top talent for our client. Your responsibilities will include sourcing and screening candidates, conducting interviews and working closely with hiring managers to understand their needs and develop effective solutions to meet those needs.
Requirements
To be successful in this role, you must have a deep understanding of the fintech industry and its talent landscape. You should be a sourcing expert and able to creatively utilise various recruitment methods with a limited budget, including online job boards, LinkedIn Sales Navigator and social media.
Strong communication and interpersonal skills are a must, as you will be interacting on all levels with international candidates, hiring managers, and other HR team members on a daily basis.
With our client undergoing a period of change, we need someone who is adaptable, resilient, and able to work in a fast-paced environment!
Your ability to multitask and prioritise will be critical in managing a high volume of recruitment activities.
Benefits
This is a contract position for approximately 6 months, located in European timezone.
If you are a results-driven and adaptable Contract Recruiter (Sales/Business or Technical) with a passion for finding top talent, we would love to hear from you.
Please answer these questions in the 'cover letter' field on the application form:
- Have you previously worked in the UK or collaborated with British-based teams?
- Are you currently working remotely or from home?
- Have you had any experience working as an independent contractor in the past?
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Senior Frontend Engineer
About Smartcat
Smartcat is on a mission to become the wall-to-wall Language AI platform, addressing the diverse needs in multilingual content for various user personas within global enterprises.
Smartcat is uniquely positioned within the $100+ billion multilingual content industry, which is currently served by tens of thousands of agencies. This results in a highly fragmented and inefficient supply chain, high costs, unacceptable turnaround times, and quality issues. Using highly qualified internal resources to translate or create multilingual content (insourcing) solves the quality problem for enterprises, but if done manually, it can't solve for scalability, high cost, and slow turnaround.
Smartcat changes the ROI equation in favor of insourcing with its Language AI platform for enterprise end-users. It delivers high-quality, instantaneous AI translations or generates new content in any language by tapping into a customer-specific multilingual content library. The AI output is further refined through human editing by the client's internal reviewers or experts from the Smartcat's embedded global marketplace of linguists and content editors. This AI output continuously improves through the editing feedback loop, ensuring consistent and customer-tailored results.
More than 1,000 global companies including ~20% of the Fortune 1,000 trust Smartcat to communicate their innovations and ideas all over the world.
As a dynamic Series C company, Smartcat is growing at 130% YoY, thanks to the high and quick ROI it delivers to global enterprises. It's well-funded by notable VCs, and is capital efficient, offering a unique blend of hyper-growth potential with downside protection and the capacity for long-term planning and strategy.
Mission
As a Senior Frontend Engineer at Smartcat, you'll be at the forefront of shaping our platform's future. You'll lead the development of cutting-edge features, optimize our application's performance and scalability, and ensure our growing global client base enjoys an exceptional user experience.
Outcomes
- Design, develop, and deploy frontend applications that solve real-world customer challenges
- Enhance application performance, scalability, and security
- Develop and maintain components within the Smartcat design system
- Collaborate closely with product managers and UX/UI designers
- Troubleshoot and resolve production issues efficiently
- Actively participate in code reviews and knowledge sharing
Requirements
- 5+ years of professional Software Engineering experience, with 2+ years in JavaScript/TypeScript
- Experience in SaaS product companies (1+ years)
- Passion and skill for writing clean, maintainable, and testable code and well-documented JavaScript/TypeScript code
- Experience with writing and maintaining Unit tests (Vitest) and E2E tests (Playwright)
- Strong experience with Vue.js
- Ability to create pixel-perfect HTML layouts from Figma designs
- Solid understanding of working with HTTP APIs
- Upper-intermediate or higher English proficiency (written and spoken)
- Strong problem-solving skills and a growth mindset
- Readiness to thrive in a fast-paced startup environment with extreme focus, a strong sense of ownership, and determination
- Openness to constructive feedback and value the ideas and opinions of others
Our technologies
- Frontend: Vue.js 2/3, Nuxt 3, Typescript
- Backend: .NET Core (C#), Python
- Databases: MongoDB, PostgreSQL, Elasticsearch
- Messaging Queue: Kafka
- Cloud Provider: Amazon AWS
- Monitoring & Logging: ELK (EFK), Prometheus, Grafana
Why joining Smartcat might be your best move so far
- Fully remote team
We are a global team of 200+ enthusiastic people spread across 30+ countries. We have been fully remote since 2020, with some locations populated with more Smartcaters than others, such as Boston, NYC, SF, the Bay Area, London, and Lisbon. - Innovating a $100 Billion industry
Smartcat’s innovative approach towards multilingual content, taps into a $100B industry. Our platform enables enterprise end users to stop using traditional outsourcing methods, and start enjoying an easy-to-use, AI-powered SaaS, that delivers immediate high-quality results, at a fraction of the cost. - High impact role enabling innovation and inclusion in organizations
You will enjoy building with us. You will drive changes in how an old-fashioned global language industry operates while improving how hundreds of thousands of people work and millions of people exchange knowledge and ideas worldwide. - Join the rocketship to scale-up 10x and beyond together
We are looking for someone to become an integral part of our team and play a crucial role in the most exciting part of our journey: transitioning from a post-Series C startup to a company exceeding $100M in ARR and $1B in valuation. Our journey isn’t for the faint of heart. We are growing at 130% YoY, thanks to our strong product-market fit and high-performing team, and plan to accelerate from here. - Smartcat Culture: Where Diversity Meets High Performance
At Smartcat, we are committed to building a culture that highlights respect and appreciation for each individual's unique background and perspective, while maintaining a strong focus on results and clear, honest and direct communication. We believe in welcoming everyone and fostering an inclusive environment where team members can be their authentic selves at work. Our commitment to diversity and inclusion is steadfast, and we stand firmly against discrimination and harassment.
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Technical Support Engineer
At StarTree we're a group of passionate individuals that desire to improve the lives of many by developing tools and technologies that support availability and speed in the world of real-time analytics.
Our aim is to make it simple for every company to delight their users - external and internal - and create new revenue streams from their data, by building the world’s most comprehensive and accessible cloud analytics system.
About the Role:
StarTree is seeking an experienced Technical Support Engineer located in Europe, who craves a challenge and feels energized to roll up their sleeves and help realize StarTree's potential and solve big problems.
Technical Support Engineers work at the intersection of StarTree’s engineering, sales, and customer success teams and drive customer success by helping identify and resolve critical issues in their production and pre-production environments.
In this role, you’ll interact directly with our customers to provide software development and operations expertise, leveraging deep knowledge of best practices in the use of Apache Pinot and the broader StarTree Platform. You will be hands-on in fixing issues seen by StarTree customers. This may include contributing fixes back to the open-source community. You’ll build strong relationships with customers, ensuring exemplary support and timely resolution to customer requests.
Responsibilities:
- Collaborate with other engineers to understand and troubleshoot systems and use the experience gained to influence the roadmap of the StarTree product
- Work with customers to resolve a wide range of issues with their deployments and usage
- Contribute to process development - we are always looking to improve how we work
- Communicate with product and engineering teams to provide product feedback from the field
- Improve product documentation and author knowledge base articles
- Create internal tooling and review product demos
What we’re looking for:
- Must be located in the Europe region to be considered.
- Experience in diagnosing, reproducing, and resolving technical issues in complex customer production environments
- Deep desire to help customers through direct interaction
- Previous experience working in a startup environment with global customers
- Experience troubleshooting applications running on Linux (resource contention, network bottlenecks, etc.)
- Operational knowledge of Java applications
- Experience with at least one mainstream distributed system
- Familiarity with streaming systems, such as Kafka, Pulsar, Flume, Flink, Spark, or similar
- Strong troubleshooting and critical thinking skills
- Excitement in learning about streaming data and becoming a domain expert in Apache Pinot
- Experience with cloud platforms such as AWS, GCP, or Azure is a plus
- Outstanding written and verbal communication skills
About StarTree:
StarTree is a cloud-based software company that enables business customers to derive advanced insights from real-time and historical data. StarTree was founded by the core software engineering team and inventors of Apache Pinot, which currently powers hundreds of user-facing applications at companies across industries, including LinkedIn, Uber, Target, 7Eleven, Etsy, Walmart, WePay, Factual, Weibo, and more. StarTree Cloud has enabled even more companies to deploy and operate real-time analytics at scale, including Stripe, Sovrn, Roadie, Just Eat Takeaway.com, Dialpad, Guitar Center, Blinkit, and more.
StarTree recently announced our Series B Funding with investment from GGV Capital, Sapphire Ventures, Bain Capital Ventures, and CRV. We have been named one of The Information's 50 Most Promising Startups and one of CRN's 10 Coolest Cloud Computing Startup Companies of 2022!
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Graduate Web Developer
Why us?
🇬🇧 Up to £35k per year, full time permanent contract
🇪🇺 Up to 42k EUR per year (or currency equivalent), full time contractor contract
🌎 Fully remote working from anywhere in Europe!
✨ Exciting high growth product, relied on by leading global sports brands
💻 Working with the latest hardware, tech stack and tools
🏋️♀️ Access to benefits (country dependent 🌎 )
The working hours for this role is 9am - 5:30pm UK/EU time.
Summary
Storyteller is a platform that allows brands to integrate Stories functionality into their apps and websites. The platform is in use by multiple global brands serving millions of users. Check us out on our website or on ProductHunt!
We're looking for an amazing Graduate Web Developer to join our growing team and help push this product on to the next 100 million users.
You'll be working with a friendly, talented team and have the opportunity to grow technically. If the idea of a fast-paced, dynamic role with tonnes of opportunity for change, responsibility and innovation sounds exciting to you, then read on!
About us
Storyteller is a high growth B2B SaaS platform, which allows companies to integrate Stories into their owned and operated platforms. Popularized by Instagram and Snapchat, Stories are perfectly suited for boosting user engagement, audience retention, and driving advertising revenue.
For customers, building their own stories experience can take years and a lot of investment however Storyteller has solved this by allowing companies to integrate in days, not years all for one monthly cost. Our end‑to‑end platform gives companies a best‑in‑class Stories experience in days with native iOS, Android, and Web SDKs, publishing tools, analytics, and ad support.
We work with globally-recognised clients in US TV and Sports industries. Every day we produce work that is innovative, challenging, and enjoyed by millions of people!
Responsibilities
What can you expect?
At first, you'll most likely be:
- Assisting with project setup - learning processes and how things fit together
- Making amends to existing projects based on client and internal feedback
- Learning
Eventually, you will be:
- Generating new projects from existing similar projects
- Working closely with the rest of our team to deliver these projects
- Working on a wider variety of projects with larger scope
- Still learning
In time, we think you should be:
- Writing high-quality code that is understood by others and runs within any performance requirements
- Being solely responsible for delivering the technical parts of a project
- Fixing software defects and sharing what was learned from these occasions
- Liaising with project management colleagues when technical input is required
- Providing technical guidance to other developers
- Always learning
Qualifications
For starters, we are looking for someone who:
- Is excited about the internet and its positive, disruptive influence
- Has knowledge of how to use computers
- Can think through problems in a systematic way
- Is self-motivated and self-learning
- Likes to be challenged
- Prides themselves on their attention to detail
- Is used to working as part of a team
Ideally, we'd also like someone who:
- Has at least a 2:1 degree in a difficult subject (be prepared to explain why your chosen field was difficult!)
- Has some programming experience (even if it was 10 years ago)
Recruitment Process
First, you will be given access to a video screening platform called Hirevire where you will answer some screening questions.
If we like the sound of your results then we’ll invite you to complete a short technical test (which you will be compensated for) so you can show us what you’re capable of doing.
Finally, we’ll then invite you to meet Murray, our Web Team Lead, and Dave, our CTO, so you can present your task to us – explaining your technical choices and how you went about building it. We’ll also ask you some final questions.
And that’s it!
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
What’s a Rich Text element?
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
Static and dynamic content editing
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
How to customize formatting for each rich text
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.