Sr. Security Engineer

Job description

### **Senior Security Engineer** Remote ### **About Brave** Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy third-party ads and trackers by default, a private search engine with a *truly* independent index, a browser-native crypto wallet, and a private ad network (opt-in!) that directly rewards you for your attention. And we’re just getting started. Already 110+ million people have switched to Brave for a faster, more private web. Millions more switch every month. The internet is a sea of privacy-harmful ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not. Brave is fighting back. Join us! ### **Summary** We are hiring a staff engineer on the Brave security and privacy team! You will help keep our users safe across Brave’s products, including Brave browser and Brave Search. Responsibilities include: 1. Security reviews of Brave products 2. Triaging and fixing security reports 3. Designing and implementing security-relevant code 4. Penetration tests of Brave products and infrastructure Brave is [widely-recognized](https://www.pcmag.com/picks/stop-trackers-dead-the-best-private-browsers) as one of the best browsers for security and privacy, doing industry-leading work with a team that’s a fraction of the size of Big Tech-supported browsers. ### **Required qualifications** - At least 5 years experience (or equivalent) in security engineering - Experience in penetration testing and/or security auditing - Proficiency in C++, both implementing and reviewing - Strong familiarity with the Web security model - Experience securing AWS infrastructure - Very comfortable working and communicating async with a geographically-distributed software development team - Be comfortable diving into an extremely large, unfamiliar and complex codebase - Be comfortable with Git and collaborating on GitHub ### **Preferred qualifications** - Experience contributing to large open source codebases and/or participating in open source communities - Proficiency in Web technologies (HTML, CSS, JavaScript) - Proficiency in Go and Rust - DevOps experience - Contributions to other Web browsers - Familiarity with Chromium's architecture, especially security - Ability to write clear technical documentation and less technical writing for blog posts or public communication. - Be excited about privacy, anonymity, and censorship resistance!