Freedom of the Press Foundation (FPF)

Contractors will complete a training of trainers program to learn FPF's methodologies and co-facilitate digital security sessions. They will eventually lead trainings on topics like risk assessment and online privacy for external clients.

The contractor will conduct application security reviews and threat modeling for SecureDrop components and architectural changes. They will also advise on hardening strategies and integrate security automation tooling to mitigate vulnerabilities.