Back-end Engineer, Security

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Design and uphold secure execution environments that isolate untrusted user code.

• Develop monitoring and alerting systems for detecting suspicious activities.

• Lead investigations into incident responses.

• Conduct vulnerability scanning, triage, perform quarterly AI-assisted security assessments, and manage incoming disclosures.

• Execute internal AI-assisted penetration testing and may coordinate with external security firms.

• Implement a security-specific review layer within the pull request process.

• Oversee SOC 2 compliance and related activities.

• Manage the vulnerability disclosure program from start to finish.

• Assist engineering teams in cultivating secure practices through reviews, documentation, and practical guidelines.

• Support customers, review pull requests, and engage with the open-source community by creating issues.

• Produce documentation.

• Generate content such as code examples, blog posts, videos, and social media updates.

⛳️ Requirements

• Solid backend engineering experience in designing and delivering production backend systems.

• Authentic curiosity in offensive security, including penetration testing, Capture The Flag (CTF) challenges, bug bounty hunting, or hacking.

• Ability to take ownership of ambiguous security issues related to products.

• A proactive approach to problem-solving.

• Willingness to be on call as needed.

• Open to attending in-person events throughout the year.

• Experience in building or strengthening sandboxed/isolated execution environments, such as containers, microVMs, gVisor, Firecracker, or WASM sandboxes.

• Proven record in penetration testing, bug bounty programs, or CTFs.

• Familiarity with AI-assisted tools for security scanning or workflows.

• Established track record of contributing to open-source projects.

• Experience at a developer tools, infrastructure, or open-source company.

• Proficiency in Node.js and TypeScript sufficient for reading and reviewing application code.

🏝️ Benefits

• Equity that ensures everyone is aligned with the company's success.

• Flexible asynchronous work environment.

• Support for home office equipment.

• 25 days of vacation, not including national holidays.

• Sick leave provisions.

• Generous parental leave policy.

• Annual training budget for books, Audible subscriptions, or online courses.

• Company pension scheme or contributions to a private pension.