Freedom of the Press Foundation (FPF)

The contractor will conduct application security reviews and threat modeling for SecureDrop components and architectural changes. They will also advise on hardening strategies and integrate security automation tooling to mitigate vulnerabilities.

The engineer will design and implement extensions to the SecureDrop end-to-end encryption protocol and contribute to its formal modeling. They will also integrate these protocols into workflows, perform security testing, and collaborate with external researchers and consultants.