Staff Security Engineer at The Browser Company

Picture a small, distributed team of nearly one hundred builders who believe the browser can become more than a window-it can become a thoughtful companion that helps people organize their ideas, connect with others, and explore the web with greater intention. At The Browser Company we are creating Dia, a new browser designed to support curiosity and creativity, and we are looking for someone who can make that experience fundamentally secure from day one.

The opportunity

As our next Staff Security Engineer you will shape the security foundations of Dia and our Prompt Safety service. Reporting to the Head of Security, you will work side-by-side with Product, Infrastructure, IT, and Legal to design, build, and ship features that protect users against emerging AI-driven threats such as prompt injection, tool misuse, and data exfiltration. This is a hands-on role where your code and architectural decisions will directly influence how millions of people experience the internet safely.

A day in the life

• You might start the morning reviewing an architectural diagram for a new AI guardrail, then pair with an engineer in Product to embed secure-by-default patterns into Dia’s client code.
• Later you could run an adversarial test against the Prompt Safety service, refine output-filtering rules, and update the incident playbook so the whole team knows exactly how to respond if something slips through.
• Before the day ends you might add a new metric to the security dashboard, join the on-call rotation to keep services reliable, and share a concise write-up that helps colleagues across functions understand the impact of the latest defenses.

Who you are

You bring at least five years of experience leading large-scale security projects and shipping production features that people rely on every day. You write production-grade code in Golang, Swift, TypeScript, or Python and feel at home moving between native client surfaces and backend services. You communicate clearly with colleagues in Product, Infrastructure, IT, and Legal, translating complex risks into shared priorities that everyone can act on quickly. You care deeply about privacy, value high-velocity execution, and naturally think about how AI and large-language-model threats change the security landscape. Because our team works in North American time zones, you have at least four hours of overlap with colleagues in the Eastern Time Zone, and you are fluent in English. Experience with browser or Chromium development and hands-on knowledge of LLM security patterns are welcome but not required.

Why you'll love it here

Our annual base salary range for this role is $225,000–$300,000 USD, and total compensation also includes equity. We offer comprehensive medical, dental, and vision insurance, generous paid time off, and the flexibility of remote work anywhere we have a legal entity. You will join a talent-dense team that values craft, ownership, and the freedom to do the best work of your career while staying connected to the people and projects that matter most to you.