Staff Security Engineer at The Browser Company

Hi, we're The Browser Company 👋 and we're building a better way to use the internet.

Browsers are unique in that they are one of the only pieces of software that you share with your parents as well as your kids. Which makes sense, they're our doorway to the most important things — through them we socialize with loved ones, work on our passion projects, and explore our curiosities. But on their own, they don’t actually do a whole lot, they’re kind of just there. They don’t help us organize our messy lives or make it easier to compose our ideas. We believe that the browser could do so much more — it can empower and support the amazing things we do on the internet. That’s why we’re building one: a browser that can help us grow, create, and stay curious.

To accomplish this lofty task, we’re building a diverse team of people from different backgrounds and experiences. This isn’t optional, it’s crucial to our mission, as we need a wide range of perspectives to challenge our assumptions and shape our browser through a bold, creative lens. With that in mind, we especially encourage women, people of color, and others from historically marginalized groups to apply.

About The Role

As a Security Software Engineer at The Browser Company, you will lead and ship security features built specifically for Dia. This is a hands-on role focused on execution: you’ll drive the highest-impact security work across client and server surfaces, coordinate with multiple teams to sequence priorities, and continually account for AI-driven risks (like prompt injection, tool abuse, data exfiltration) in every design and review. You will report to the Head of Security, working closely with Product, Infra, IT, and Legal to ship security features fast.

Overall you will...

• Design and ship AI security features in the Dia product and our Prompt Safety service.

• Drive Dia’s security architecture and threat modeling across client and backend surfaces with an AI-first threat lens.

• Develop AI-aware defenses that make our systems intrinsically secure, with guardrails against prompt injection/jailbreaks, output filtering/policy enforcement, red teaming/adversarial testing, and incident playbooks.

• Establish metrics and dashboards tracking the effectiveness of our security infrastructure and AI defense to guide priority and measure impact.

Technical Projects You’ll Shape with Us…

• Architect and deliver AI security features for Dia, including building out the future of LLM protections, AI fuzzing integration, managed accounts, and advanced authentication/authorization controls.

• Architect and implement LLM assisted fuzzing for Dia’s Assistant and the Prompt Safety Service.

• Collaborate with engineering and product teams to embed secure-by-default patterns and frameworks throughout Dia’s codebase.

• Drive the creation and evolution of security metrics and dashboards to measure and communicate impact across the organization.

• Join our team’s on-call rotation, helping the team keep our services reliable and responding to production and security incidents.

Qualifications

• 5+ years leading large-scale security engineering projects and shipping security features in production.

• Strong coding skills in one or more of: Golang, Swift, TypeScript, or Python.

• Comfortable working across native client and backend services.

• Excellent cross-functional communication; able to align and coordinate across Product, Infra, IT, and Legal to deliver high-impact outcomes quickly.

• Privacy-minded with a bias for high-velocity execution and clear prioritization.

• Our team is based in North American time zones and require that folks have 4+ hours of overlap time with team members in Eastern Time Zone.

• You resonate with our company values.

Experience in the below areas is not required, but would be nice to have:

• Familiarity with client side software development. Familiarity with browser or Chromium development a plus.

• Familiarity with AI/LLM security risks (prompt injection, tool-use abuse, data exfiltration) and practical guardrail patterns.

Compensation and Benefits

• Our total compensation for full-time employees includes base salary, equity, and comprehensive benefits. The annual base salary range for this role is $225,000-$300,000 USD. The final offer will depend on your experience, expertise, and interview performance. Our goal is simple: if it feels like the right mutual fit, compensation shouldn’t be the thing that gets in the way. We’ve built a small, talent-dense team who cares deeply about their craft, and we pay competitively in line with current market benchmarks.

• Benefits: We offer best-in-class benefits (https://go.atlassian.com/perksandbenefits) designed to support you, your family, and your life outside of work. Think big-company perks with startup-style impact, ownership, and ways of working — so you have the space and support to do the best work of your career.

• Location: We’re a remote-friendly company and can hire in any country where Atlassian has a legal entity. If you live in New York (or want to visit), you’re welcome to work from our office in Williamsburg.

The Browser Company is an ambitious team of close to 100 people (and growing!) who are passionate about building great products. We are a remote-first, distributed team, with the option to work from office in Brooklyn, New York. We strongly support diversity and encourage people from all backgrounds to apply. 

🚙 To read more about what we value as a company, check out Notes on Roadtrips on our blog.