{"id":3865171,"url":"https://alion.io/job/herodevs-senior-software-engineer-runtimes","title":"Senior Software Engineer (Runtimes)","company":{"id":455859,"name":"Herodevs","domain":"herodevs.com","url":"https://alion.io/company/herodevs","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"CMake","optional":false},{"name":"CVE","optional":false},{"name":"Debian","optional":false},{"name":"GCC","optional":false},{"name":"Linux","optional":false},{"name":"Nginx","optional":false},{"name":"Node JS","optional":false},{"name":"PHP","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Ubuntu","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C","optional":true},{"name":"CVSS","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"OpenSSL","optional":true}],"status":"live","first_seen_at":"2026-11-06T10:06:10Z","employer_posted_date":null,"last_verified_at":"2026-11-06T10:06:10Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"About the RoleWe are seeking a Senior Software Engineer to join our Never-Ending Support (NES) team. This role is specifically focused on developing and proving out new product lines in our runtimes. You will research new potential products to add to our ever expanding product line, produce critical security patches for CVEs in our various runtime products (PHP, Postgres, NGINX, etc.), deliver builds across many operating system distributions, and build the automation systems that make this work scale.\nKey Responsibilities\nResearch and prove out new NES products: assess an end-of-life project's codebase, build system, and CVE history, then stand up a working, supportable build pipeline for it\n\nMaintain the existing NES portfolio by analyzing upstream security fixes and backporting CVE patches in C, C++, and other languages to end-of-life versions\n\nImplement more comprehensive or novel security fixes to end of life technologies \n\nRead, write, and review CVE backports, reasoning about what a patch might break across versions, platforms, and configurations\n\nBuild and deliver packages across many Linux distributions (RHEL, Debian, Ubuntu, Alpine, Amazon Linux, and others), and add support for new distributions and releases as they ship\n\nResurrect and maintain build environments for legacy code: toolchain archaeology, pinning dependencies that no longer resolve, and keeping old compilers and libraries building\n\nBuild and utilize AI-assisted automation for triage, patch analysis, backport drafting, and regression verification, to scale the product securing process\n\nBuild and maintain test harnesses that validate CVE patch correctness and backwards compatibility\n\nProvide support to customers' engineering teams on compatibility issues and upgrade paths\n\nRequired Qualifications\nStrong understanding of language runtimes and server software internals, such as Node.js, PHP, NGINX, or PostgreSQL\n\nDemonstrated ability to read and reason about unfamiliar low-level C and C++ code: understanding a security patch well enough to reimplement it against a different code baseline. You enjoy working with completely unfamiliar, but significant open source runtimes.\n\nExperience reviewing security patches for correctness, memory safety, and unintended side effects\n\nDeep knowledge of Linux packaging and build tooling: autotools, CMake, Make, GCC/Clang, RPM and DEB packaging, and distribution build systems (mock, pbuilder, abuild, or similar)\n\nExperience building and shipping software across many Linux distributions and versions, and understanding the toolchain, libc, and dependency differences between them well enough to support new distributions as they are released\n\nExperience with cross-compilation and multiple CPU architectures (x86_64, aarch64, armv7)\n\nExperience building and debugging complex software from source, including toolchain and build-system archaeology\n\nPractical experience using LLMs to automate real engineering work, with judgment about where automation helps and where it can't be trusted\n\nStrong ownership of correctness and quality: rigorous testing, regression coverage, and an instinct for what a patch might break\n\nComfortable in a small, high-autonomy team where you help shape the process as much as follow it.\n\nAbility to take a new product from research to launch\n\nComfortable being on support calls with end users of our products, to troubleshoot complex issues that customers have integrating NES into the foundations of their tech stack\n\nStrong communication skills, to communicate results in early product iterations, or solutions in tier-3 support capacities\n\nPreferred Qualifications\nBackground in security research, vulnerability triage, or product security\n\nContributions to open source C/C++ projects. High values targets would be PHP, NGINX, PostgreSQL, Node.js, OpenSSL, or the Linux kernel\n\nStrong grasp of security fundamentals: CVEs, CVSS, common vulnerability classes in C (buffer overflows, use-after-free, integer overflows, format strings, DoS via resource exhaustion), and how to assess exploitability\n\nFamiliarity with container image hardening, SBOMs, artifact signing, and supply chain security\n\nExperience as either a technical lead or team lead\n\nExperience running production services on AWS, Azure, and Kubernetes\n\nAt HeroDevs, we believe in the power of diversity, equity, and inclusion to drive innovation, creativity, and success. We are committed to creating a workplace that embraces and celebrates individual differences. We encourage people of all backgrounds and experiences to apply.\nOriginally posted on Himalayas","description_format":"text","description_chars":4603,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-06T11:32:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["seen:0","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/herodevs-senior-software-engineer-runtimes","json_url":"https://alion.io/job/herodevs-senior-software-engineer-runtimes.json","meta":{"generated_at":"2026-11-07T18:49:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28812,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":455859},"rest":"https://alion.io/mcp/rest/get_company?id=455859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fherodevs-senior-software-engineer-runtimes"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fherodevs-senior-software-engineer-runtimes"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fherodevs-senior-software-engineer-runtimes"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/herodevs-senior-software-engineer-runtimes\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fherodevs-senior-software-engineer-runtimes"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3865171}},{"tool":"search_jobs","arguments":{"company":"herodevs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3865171},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}