Senior Security Engineer
- Role
- Security
- Experience
- Staff
The listing doesn't say where it hires from. Check the description or the employer's site before applying.
No BS summary
Senior/staff security engineer with 5+ years in security engineering. Must know penetration testing or security auditing, C++, Web security, AWS security, Git/GitHub, and async work in a distributed team.
Core skills
Required skills
Optional skills
Senior Security Engineer
Remote
About Brave
Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy third-party ads and trackers by default, a private search engine with a truly independent index, a browser-native crypto wallet, and a private ad network (opt-in!) that directly rewards you for your attention. And we’re just getting started. Already 110+ million people have switched to Brave for a faster, more private web. Millions more switch every month.
The internet is a sea of privacy-harmful ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not. Brave is fighting back. Join us!
Summary
We are hiring a staff engineer on the Brave security and privacy team! You will help keep our users safe across Brave’s products, including Brave browser and Brave Search. Responsibilities include:
- Security reviews of Brave products
- Triaging and fixing security reports
- Designing and implementing security-relevant code
- Penetration tests of Brave products and infrastructure
Brave is widely-recognized as one of the best browsers for security and privacy, doing industry-leading work with a team that’s a fraction of the size of Big Tech-supported browsers.
Required qualifications
- At least 5 years experience (or equivalent) in security engineering
- Experience in penetration testing and/or security auditing
- Proficiency in C++, both implementing and reviewing
- Strong familiarity with the Web security model
- Experience securing AWS infrastructure
- Very comfortable working and communicating async with a geographically-distributed software development team
- Be comfortable diving into an extremely large, unfamiliar and complex codebase
- Be comfortable with Git and collaborating on GitHub
Preferred qualifications
- Experience contributing to large open source codebases and/or participating in open source communities
- Proficiency in Web technologies (HTML, CSS, JavaScript)
- Proficiency in Go and Rust
- DevOps experience
- Contributions to other Web browsers
- Familiarity with Chromium's architecture, especially security
- Ability to write clear technical documentation and less technical writing for blog posts or public communication.
- Be excited about privacy, anonymity, and censorship resistance!
What you'll do
- Conduct security reviews of Brave products
- Triage and fix security reports
- Design and implement security-relevant code
- Perform penetration tests of Brave products and infrastructure
- Help keep users safe across Brave products, including Brave browser and Brave Search
What they require
- At least 5 years experience or equivalent in security engineering
- Experience in penetration testing and/or security auditing
- Proficiency in C++, both implementing and reviewing
- Strong familiarity with the Web security model
- Experience securing AWS infrastructure
- Very comfortable working and communicating async with a geographically-distributed software development team
- Comfortable diving into an extremely large, unfamiliar and complex codebase
- Comfortable with Git and collaborating on GitHub
- Preferred: Experience contributing to large open source codebases and/or participating in open source communities
- Preferred: DevOps experience
- Preferred: Contributions to other Web browsers
- Preferred: Familiarity with Chromium's architecture, especially security
- Preferred: Ability to write clear technical documentation and less technical writing for blog posts or public communication
- Preferred: Excited about privacy, anonymity, and censorship resistance
Brave is building a safer, faster, more private browsing experience and privacy-respecting independent search technology, serving over 120 million monthly active users.