Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Secure and enhance the ESPHome codebase while collaborating with a dynamic team.
- Company: Join the Open Home Foundation, a non-profit focused on smart home privacy and sustainability.
- Benefits: Fully remote work, flexible hours, and competitive compensation based on expertise.
- Why this job: Make a real impact on smart home security and work with cutting-edge technology.
- Qualifications: Senior experience in software security, strong C++ and Python skills required.
- Other info: Opportunity to work on innovative projects in a supportive, remote environment.
The predicted salary is between 22 - 30 £ per hour.
The Open Home Foundation is looking for a Security Developer to join our Ecosystem department on a contract basis. This department is responsible for the development of various projects under the Open Home Foundation umbrella, including ESPHome. We deeply care about the security and privacy of users working with our products and building devices with ESPHome. We want to ensure our base framework follows good security patterns so users and companies building on ESPHome firmware can create devices that are as secure as possible. To achieve this, we will be working with an external agency to perform a full security audit on ESPHome and its related tools.
The ESPHome team is currently short on dedicated security expertise, so we are looking for an expert contractor to bridge this gap. This role will be involved in hardening the code used in ESPHome, the project that allows turning common microcontrollers into smart home devices. ESPHome consists of a large core codebase written in C++ and a code generation component written in Python. Therefore, we require a candidate to be skilled in both programming languages, with a heavy emphasis on security hardening in an embedded context.
What You Are Going To Do
- Review the existing codebase to identify and fix low-hanging fruit regarding security vulnerabilities before the external audit begins.
- Act as the primary technical point of contact to guide the external agency when they are performing the security audit on ESPHome and its tools.
- Triage the findings from the external agency and fix (at least) the high-priority security issues found during the audit.
- Work hand-in-hand with other team members within the ESPHome team to ensure security best practices are followed as the application evolves.
- Review code from other team members and community contributors with a specific focus on security implications.
- Fix bugs related to security technical debt.
What You Need To Have
- Senior experience in the security hardening of software.
- Strong expertise in C++ development (used in the ESPHome core).
- Strong expertise in Python development (used in ESPHome tooling).
- Experience with and interest in microcontrollers and embedded systems.
- Experience guiding or participating in professional third-party software security audits.
- Experience with Git and GitHub.
- Professional fluency in English: excellent written and verbal communication skills.
It would be great if you also have
- A passion for smart homes and automation.
- Experience as an ESPHome or Home Assistant user.
- Knowledge of IoT-specific security challenges (e.g., local network security, encryption on resource-constrained devices).
What we offer You
This is a temporary contractor position. The duration will cover the pre-audit preparation, the active audit phase, and the subsequent remediation phase. The Open Home Foundation is a fully remote organization; you can work from anywhere in the world. Because we are a fully remote company, there is no fixed schedule. However, for team communication we try to ensure at least 3 hours of overlap in the workday; most of our team is based in Europe. Your point of contact will be our Ecosystem Lead, who is based in the Netherlands. Compensation will be based on an agreed-upon hourly or project rate commensurate with senior security expertise.
About Us
The Open Home Foundation is a non-profit organization based in Switzerland, focusing on privacy, choice, and sustainability for smart homes. We support open-source projects and open connectivity standards, including Home Assistant and ESPHome.
The recruitment process
- Apply for the project.
- Our team will review your application.
- Initial interview.
- Technical assessment or discussion regarding security approaches.
- Interview with the team.
- Contract offer.
Contractor: Security Developer employer: Open Home Foundation
Contact Detail:
Open Home Foundation Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Contractor: Security Developer
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, join relevant forums, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can refer you directly to hiring managers.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your security projects, especially those involving C++ and Python. This will give potential employers a taste of what you can do and set you apart from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on common security challenges in embedded systems. Be ready to discuss your experience with security audits and how you've tackled vulnerabilities in past projects.
✨Tip Number 4
Don't forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining the Open Home Foundation team.
We think you need these skills to ace Contractor: Security Developer
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Security Developer role. Highlight your experience in C++ and Python, and don’t forget to mention any relevant security hardening projects you've worked on. We want to see how your skills align with what we’re looking for!
Show Off Your Passion: Let us know why you’re excited about smart homes and automation! If you’ve used ESPHome or Home Assistant, share your experiences. We love seeing candidates who are genuinely interested in our mission and products.
Be Clear and Concise: When writing your application, keep it straightforward. Use clear language and avoid jargon unless it’s necessary. We appreciate a well-structured application that gets straight to the point, especially when discussing your security expertise.
Apply Through Our Website: Don’t forget to submit your application through our website! It’s the best way for us to receive your details and ensures you’re considered for the role. Plus, it makes the whole process smoother for everyone involved.
How to prepare for a job interview at Open Home Foundation
✨Know Your Code Inside Out
Before the interview, make sure you’re familiar with the ESPHome codebase. Brush up on both C++ and Python, as you'll need to demonstrate your expertise in security hardening within these languages. Being able to discuss specific vulnerabilities you've encountered or fixed will show your depth of knowledge.
✨Understand Security Best Practices
Familiarise yourself with common security patterns and practices, especially in embedded systems. Be ready to discuss how you would approach hardening the code and what steps you would take to ensure security best practices are followed throughout the development process.
✨Prepare for Technical Discussions
Expect technical questions related to security audits and vulnerability assessments. Think about your past experiences guiding third-party audits and be prepared to share specific examples. This will help demonstrate your capability to act as a primary technical point of contact.
✨Show Your Passion for Smart Homes
Let your enthusiasm for smart home technology shine through. If you have experience with ESPHome or Home Assistant, share your insights and how they relate to security challenges. This will not only highlight your technical skills but also your genuine interest in the field.
