Sr. Security Engineer

### **Senior Security Engineer** Remote ### **About Brave** Brave is on a mission to protect the human right to privacy online. We've built a free web browser that blocks creepy third\-party ads and trackers by default, a private search engine with a *truly* independent index, a browser\-native crypto wallet, and a private ad network (opt\-in!) that directly rewards you for your attention. And we're just getting started. Already 110\+ million people have switched to Brave for a faster, more private web. Millions more switch every month. The internet is a sea of privacy\-harmful ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what's true and what's not. Brave is fighting back. Join us! ### **Summary** We are hiring a staff engineer on the Brave security and privacy team! You will help keep our users safe across Brave's products, including Brave browser and Brave Search. Responsibilities include: * Security reviews of Brave products * Triaging and fixing security reports * Designing and implementing security\-relevant code * Penetration tests of Brave products and infrastructure Brave is widely\-recognized as one of the best browsers for security and privacy, doing industry\-leading work with a team that's a fraction of the size of Big Tech\-supported browsers. ### **Required qualifications** * At least 5 years experience (or equivalent) in security engineering * Experience in penetration testing and/or security auditing * Proficiency in C\+\+, both implementing and reviewing * Strong familiarity with the Web security model * Experience securing AWS infrastructure * Very comfortable working and communicating async with a geographically\-distributed software development team * Be comfortable diving into an extremely large, unfamiliar and complex codebase * Be comfortable with Git and collaborating on GitHub ### **Preferred qualifications** * Experience contributing to large open source codebases and/or participating in open source communities * Proficiency in Web technologies (HTML, CSS, JavaScript) * Proficiency in Go and Rust * DevOps experience * Contributions to other Web browsers * Familiarity with Chromium's architecture, especially security * Ability to write clear technical documentation and less technical writing for blog posts or public communication. * Be excited about privacy, anonymity, and censorship resistance!