Responsibilities
- Conduct security reviews of Brave products.
- Triage and fix security reports.
- Design and implement security-relevant code.
- Perform penetration tests of Brave products and infrastructure.
- Help protect users across Brave Browser, Brave Search, and other Brave products.
Requirements
- At least five years of experience in security engineering or equivalent experience.
- Experience with penetration testing and/or security auditing.
- Proficiency in C++ for implementation and code review.
- Strong familiarity with the web security model.
- Experience securing AWS infrastructure.
- Comfort working asynchronously with a geographically distributed software development team.
- Ability to work in a large, unfamiliar, and complex codebase.
- Comfort with Git and collaboration on GitHub.
- Preferred: experience with large open-source codebases or open-source communities.
- Preferred: proficiency in HTML, CSS, JavaScript, Go, and Rust.
- Preferred: DevOps experience.
- Preferred: contributions to other web browsers and familiarity with Chromium’s architecture, especially security.
- Preferred: ability to write technical documentation and less technical public communication.
Benefits
- Remote work
- Work with a geographically distributed software development team
- Opportunity to contribute to Brave’s privacy-focused browser, search engine, and open-source ecosystem
About Brave
Brave is building a user-first Web. The Brave browser is used by over 120 million people worldwide. It blocks third-party ads and trackers by default for fast, private browsing. It also offers a wealth of helpful features including a VPN and an AI browsing assistant. Brave is one of just three Web search indexes at scale in the West, and it’s the only one commercially available in a reliable, independent Search API. It provides users with accurate, AI-enhanced answers without profiling them. Brave Search is available as the default search engine in Brave, or via any other browser at search.brave.com. The Brave Search API helps organizations supply their AI LLMs with real-time data, power agentic search, train foundation models, and create search-enabled software. The Brave Search API helps anyone—from hobbyists to large enterprises—build applications that benefit from having access to the Web, going beyond the static knowledge of AI models. Our API uses our own search index so we can guarantee the highest privacy and security standards. Brave is also reinventing digital advertising. Users can opt into our privacy-first digital ads platform to earn crypto rewards for their attention. Advertisers get access to engaged, otherwise unreachable audiences. Creators can unlock new revenue streams. Brave Software is an independent company founded in 2015 by Brendan Eich, creator of JavaScript and co-founder of Mozilla (Firefox), and Brian Bondy, formerly of Khan Academy and Mozilla.