Senior Web Security Engineer, Browser Platform

DuckDuckGo · AnywhereRemotesenior

In short

▸Ingeniero de seguridad web senior enfocado en proteger navegadores y funciones de inteligencia artificial de DuckDuckGo.
▸Trabajo diario: auditorías de seguridad, mitigación de vulnerabilidades, desarrollo de herramientas de detección y response a incidentes, y hardening de experie
▸Destacado: tienes propiedad total de proyectos de seguridad críticos que impactan directamente a millones de usuarios globales.

Strong English proficiency required for collaboration across global teams

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

What they ask for

✓7+ años de experiencia en seguridad web o aplicaciones
✓Experiencia comprobada en creación de harnesses de seguridad para sistemas agenticos
✓Capacidad para influenciar el diseño de funciones con seguridad integrada desde el inicio
✓Experiencia práctica identificando y explotando vulnerabilidades web (XSS, CSRF, inyección, fallos de autorización)
✓Dominio de JavaScript y al menos un WebView (WebKit, WebView2, Chromium WebView)
✓Conocimiento profundo del modelo de seguridad del navegador (SOP, CSP, CORS, SameSite cookies)

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

JavaScriptSwiftKotlinC#PerlGoWebKitWebView2Chromium WebViewSecurity testing tools and fra

Who should you write to at DuckDuckGo?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Who We Are Hi, we're DuckDuckGo, the online protection company and remote-first team of 300+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, annual revenue now exceeds $100m USD and millions use our browser on on Mac , Windows , iOS , and Android , our search engine , and the DuckDuckGo subscription . ai , which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place. Our culture of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. ), execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), build and maintain harnesses that get security fixes out automatically, manage application security scanning infrastructure setup, deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! About You 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) Recent experience creating security focused agentic harnesses Experience influencing large feature designs to have security baked in from the start Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). Experience with at least one WebView technology (WebKit, WebView2, Chromium WebView, etc.) and understanding of browser security models (SOP, CSP, CORS, SameSite cookies) Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) Familiarity with security testing tools and frameworks Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams Compensation $ 178,500 USD annually and stock options. Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation. Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK. Our Team Member Support Guide explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. Hiring Process Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire .

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.