Eclipse Foundation

• Develop, maintain, and improve detection rules, alerts, dashboard, and monitoring workflows across infrastructure, cloud services, identity systems, endpoints, and application platforms. • Participate in incident response activities, including triage, investigation, containment, remediation coordination and post-incident analysis. • Operate and improve security monitoring tooling, including SIEM, log aggregation, alerting, vulnerability management, and related detection and response platforms. • Proactively investigate suspicious activity, anomalous behavior, and emerging threats affecting infrastructure and services. • Create and maintain incident response playbooks, escalation procedure, actionable security guidance, and operational documentation to cloud operations, product development, and systems engineering teams. • Collaborate with the systems engineering team to identify and remediate security weaknesses in cloud, container, Linux, network, identity, and service configurations. • Actively participate in comprehensive disaster recovery planning, business continuity strategy formulation, and live simulations/exercises to validate system resilience and team readiness.

• Develop and execute product marketing programs to amplify awareness, adoption, and participation in Open VSX • Define compelling positioning, messaging, value propositions, and audience-specific narratives for Open VSX • Develop clear messaging that explains the value of funding critical developer infrastructure • Translate technical capabilities, product roadmap priorities, customer needs, usage insights, and market feedback into clear messaging • Work closely with Product, Sales, and Business Development to support the development, launch, and promotion of Open VSX Managed Registry • Create and execute launch plans for Open VSX offerings • Make data-driven decisions to move Open VSX initiatives forward • Partner with the Senior Sales Manager, Commercial Offerings to support prospect education and campaign execution • Create high-quality product marketing assets • Build close working relationships within the Open VSX, Eclipse Theia, cloud IDE, and developer tools ecosystems

• Design, build, and operate AI-assisted vulnerability management workflows across Eclipse Foundation open source projects • Build pipelines and integrate AI-assisted analysis into developer and CI/CD workflows • Evaluate findings critically and reduce false positives • Collaborate with project maintainers to land real fixes • Deliver measurable improvements in how the Foundation discovers, prioritizes, and resolves security issues • Help define safe and appropriate use of AI tooling • Produce internal playbooks, technical write-ups, and metrics dashboards • Participate in vulnerability disclosure processes, CVE management, and security advisories as needed

• Monitor, triage, and investigate security alerts, events, reports, and potential incidents. • Assist with initial analysis, evidence gathering, containment coordination, documentation, and post-incident follow-up. • Help maintain and improve incident response procedures, playbooks, templates, checklists, and related documentation. • Review vulnerability scan results and security reports, validate findings, assess potential impact, and help prioritize remediation. • Track vulnerabilities and remediation work across teams, ensuring issues are clearly documented and followed through to closure. • Work with internal stakeholders, project teams, and other collaborators to communicate findings, risks, and recommended remediation steps in a clear and practical way. • Help identify contributing factors behind incidents or recurring vulnerabilities and suggest practical improvements.

• Manage the full lifecycle of project participation • Lead the creation of exploitation strategies, market analysis, and business plans • Initiate and organize workshops, hackathons, and conferences • Support project developers in adopting the Eclipse Development Process (EDP) • Contribute to EU project proposals • Promote the Foundation’s vision in strategic research agendas • Ensure high-quality execution of tasks, including regular reporting of workload, expenses, and deliverables

• Design, develop, and maintain features across Eclipse Foundation platforms and services, including Open VSX, APIs, community platforms, and internal applications. • Build and operate secure and reliable services using Java, Spring Boot, PostgreSQL, MariaDB, Redis, React, and TypeScript. • Contribute to backend architecture, API design, data models, and integration patterns. • Apply security best practices throughout the development lifecycle, including authentication, authorisation, dependency management, secrets management, input validation, and secure configuration. • Improve platform resilience through safeguards such as rate limiting, abuse prevention, monitoring, and operational controls. • Support the maintenance and evolution of Open VSX and related services. • Write automated tests and contribute to reliable CI/CD pipelines. • Participate in code reviews and collaborate with team members to maintain code quality. • Troubleshoot production issues and contribute to monitoring, logging, and observability. • Write and maintain technical documentation for internal users, contributors, and open source communities. • Work constructively with internal stakeholders, external contributors, and the broader open source community.

• You will play a central role in developing and improving software that supports Eclipse open source projects. • Maintain and evolve the Project Management Infrastructure (PMI) built on PHP and Drupal. • Develop, maintain, and improve project-related services and tooling written in Java and JavaScript, including: ECA validation service Adding and removing committers from Git repositories in support of project governance. • Design and implement automation for internal processes and data-related tasks using Python. • Refactor and modernise legacy services and scripts to improve code quality, reliability, and maintainability. • Reduce manual effort by replacing ad hoc processes with well-designed software and automation. • Collaborate closely with the Eclipse open source project team to prioritise, design, and deliver improvements. • Apply secure coding practices aligned with OWASP guidance. • Write and maintain technical documentation to support ongoing development and operations.