RFP -- Security Researcher

Scope of work In coordination with FPF’s other engineers and researchers, the contractor will: Conduct application security reviews across SecureDrop components. Assist in performing threat modeling for new features and architectural changes. Review pull requests and design documents with a focus on the security properties of new features and the security implications of architectural changes. Assist in preparing materials for and reviewing findings from third-party security audits. Advise on hardening strategies for SecureDrop’s deployment environments. Review and integrate security automation tooling, such as LLMs, static code analyzers, and other tools that can mitigate or discover security vulnerabilities. Desired qualifications