OSS-SIRT Engineer: Open Source Vulnerability Ops

Linux Foundation Co; United States; Remote; USD 140,000 - 155,000; Full time

Job summary

The Linux Foundation hosts the OSS-SIRT Engineer role focused on the daily operation of vulnerability intake, validation, enrichment, and maintainer coordination. This growth position aims to build deep expertise in open source vulnerability management and ecosystem-scale security operations.

Initial responsibilities center on triage, validation, and collaboration with researchers, with opportunities to advance toward senior-level duties as you gain autonomy and contribute to runbooks and

Qualifications

• 2-5 years in security engineering, application security, or open source development.
• Familiarity with vulnerability lifecycles and disclosure practices.
• Strong written communication skills.
• Interest in open source communities and collaboration.

Responsibilities

• Triage incoming vulnerability reports and submissions.
• Validate records for completeness, accuracy, and schema compliance.
• Assist with maintainer and researcher communications.
• Support CVE/ID requests and aliasing workflows.
• Help maintain dashboards, metrics, and reporting.
• Contribute to documentation, playbooks, and runbooks.

Skills

Security engineering

Open source development

Technical writing

Collaboration

Tools

CVE/OSV

GitHub Advisories

Scripting

Job description

The Linux Foundation hosts the OSS-SIRT Engineer role focused on the daily operation of vulnerability intake, validation, enrichment, and maintainer coordination. This growth position aims to build deep expertise in open source vulnerability management and ecosystem-scale security operations.

Initial responsibilities center on triage, validation, and collaboration with researchers, with opportunities to advance toward senior-level duties as you gain autonomy and contribute to runbooks and