Python 软件工程师(远程工作)
Python Software Engineer (remote work)
TuxCare 提供全面的 Linux 和开源软件安全解决方案,专为企业组织设计。通过 TuxCare,企业可以自动化漏洞补丁修复,减少停机时间,保持安全和合规性,并依靠对 Linux 和开源安全的深入专业知识。我们的解决方案涵盖广泛使用的 Linux 发行版、已结束生命周期的系统、开源软件生态系统以及其他关键基础设施。了解更多信息:https://tuxcare.com/ / https://tuxcare.com/endless-lifecycle-support/ 我们正在寻找一名软件工程师加入我们 Endless Lifecycle Support(ELS)产品中的 ELS 交付流水线团队。ELS 为上游不再维护的软件版本提供安全更新。交付流水线从报告漏洞开始,经过评估、补丁、构建、测试和在支持的生态系统中发布包。我们的团队构建并运营连接这些阶段的内部服务、工具和集成,并跟踪工作直至发布。我们自动化重复任务,并帮助工程团队诊断和恢复流水线故障。对于此职位,您需要具备从与利益相关者直接澄清需求到设计、实现、部署和运维解决方案的完整生产系统经验。您将跨现有服务和工具工作,提高可靠性,简化流程,并在生产环境中验证结果。
关键职责:
构建发布安全通告的流水线,从漏洞评估和已发布的修复中获取信息
在大规模的包、版本和依赖项库存中自动化漏洞评估
集成漏洞发现扫描器,核对其发现结果,并将结果连接到评估和补丁流程
构建和运维 Python 服务、命令行工具和内部接口,供工程师评估漏洞、跟踪补丁和管理发布
直接与利益相关者合作,澄清需求、确定优先级,并定义结果如何验证
改进构建和部署自动化,监控生产系统,并在服务、容器和数据存储中排查故障
审查代码并改进自动化测试、安全性和可维护性
在日常开发中使用 AI 编码代理,审查和测试它们生成的代码
要求
必须具备
构建和维护生产系统的经验
查看英文原文
TuxCare offers a comprehensive portfolio of security solutions for Linux and open-source software designed for enterprise organizations.With TuxCare, companies can automate vulnerability patching, minimize downtime, maintain security and compliance, and rely on deep expertise in Linux and open-source security.Our solutions cover widely used Linux distributions, end-of-life systems, open-source software ecosystems, and other critical infrastructure.Learn more at: https://tuxcare.com/ / https://tuxcare.com/endless-lifecycle-support/ We're looking for a Software Engineer to join the ELS Delivery Pipeline team within our Endless Lifecycle Support (ELS) product. ELS provides security updates for software versions that are no longer maintained upstream. The delivery pipeline takes reported vulnerabilities through assessment, patching, building, testing, and package publication across supported ecosystems. Our team builds and operates the internal services, tools, and integrations that connect these stages and track work through to release. We automate repetitive tasks and help engineering teams diagnose and recover from pipeline failures.For this role, it is critical that you have experience owning production systems end to end — from clarifying requirements directly with stakeholders to designing, implementing, deploying, and operating solutions. You will work across existing services and tools, improving reliability, simplifying workflows, and verifying results in production.Key Responsibilities:Build pipelines that publish security advisories from vulnerability assessments and released fixes.Automate vulnerability assessment across large inventories of packages, versions, and dependencies across ecosystems.Integrate vulnerability discovery scanners, reconcile their findings, and connect results to assessment and patching workflows.Build and operate Python services, command-line tools, and internal interfaces for engineers assessing vulnerabilities, tracking patches, and managing releases.Work directly with stakeholders to clarify requirements, agree priorities, and define how results will be verified.Improve build and deployment automation, monitor production systems, and troubleshoot failures across services, containers, and data stores.Review code and improve automated testing, security, and maintainability.Use AI coding agents in day-to-day development, reviewing and testing the code they produce.RequirementsMust haveExperience building and maintaining production software in Python.Strong Linux troubleshooting and production-debugging skills.Experience designing and integrating APIs and services.Experience with asynchronous or distributed processing.Experience with CI/CD, containers, and build or deployment automation.Solid relational data-modelling and SQL skills.Advanced hands-on experience using coding agents for real engineering tasks, including delegating substantial work, providing context and constraints, supervising autonomous execution, and independently reviewing, debugging, testing, and validating agent-generated output.Nice to haveExperience with Python stack: Django, Django REST Framework, Celery, and RabbitMQ.Experience building services or command-line tools in Go.Experience with package ecosystems, dependency metadata, or vulnerability data formats such as OSV.BenefitsWhat's in it for you?Work independently with a high level of ownership and autonomy.Fully remote work with flexible working hours.24 paid vacation days, 10 national holidays, and unlimited sick leave.Private medical insurance compensation.Co-working and gym/sports reimbursement.Education budget.Opportunity to receive a reward for innovative ideas that the company can patent.By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://tuxcare.com/privacy-policies-hub/candidate-privacy-notice/), which provides detailed information on how we maintain and handle your data.