Security Engineer - Node.js Proactive Defense

We are looking for a highly autonomous Security Engineer to build a new generation of runtime protection for Node.js applications. This role combines security research, engineering, and product ownership, working at the intersection of application security, malware detection, and runtime instrumentation.

• Define and build a new security product line focused on runtime protection within Node.js environments.
• Determine the technical strategy, including instrumentation methods, deployment models, programming language choices, and detection approaches.
• Design, develop, test, and iterate on the complete solution from concept through production deployment.
• Establish detection methodologies to distinguish malicious activity, vulnerabilities, and legitimate application behavior across diverse frameworks and libraries.
• Use large-scale security intelligence, including malware data, reputation signals, and threat feeds, to improve protection capabilities.
• Optimize the product against key security and business metrics, including runtime performance, false positives, false negatives, and customer impact.
• Collaborate with security specialists, architects, and engineering teams while maintaining ownership of technical direction and execution.
• Leverage AI-assisted development tools and modern engineering practices to accelerate delivery and improve quality.
• Monitor real-world customer telemetry and continuously improve detection logic and protection mechanisms.

• Strong experience with the Node.js runtime and JavaScript ecosystem.
• Solid understanding of web application security principles and current exploitation techniques.
• Ability to design detection logic that works reliably at scale while minimizing false positives.
• Experience building security tools, application protection solutions, runtime security products, or related engineering systems.
• Strong problem-solving skills and the ability to operate independently in a fast-moving environment.
• Ability to take ownership of product direction, architecture, engineering execution, and quality assurance.
• Comfortable working as a hands-on technical owner rather than only managing specifications or reviews.
• Experience using AI coding assistants and modern development workflows is a plus.
• Background in malware analysis, incident response, managed hosting environments, vulnerability research, or security research is highly valued.
• Experience publishing security research, creating vulnerability disclosures, or developing detection rulesets is a plus.

• Fully remote work environment with flexible working hours and the ability to work from anywhere worldwide.
• Opportunity to work on challenging security projects with direct impact on protecting modern web infrastructure.
• Strong focus on professional growth and continuous development.
• Paid annual vacation, public holidays, and flexible sick leave policy.
• Support for private medical insurance.
• Reimbursement support for co-working spaces and sports or wellness activities.
• Dedicated learning and education budget.
• Opportunity to be recognized and rewarded for innovative ideas and patented solutions.
• Access to modern engineering tools and resources to support high-impact development.