Senior Web Security Engineer, Browser Platform

Stack

Responsibilities

• ▹Harden agentic browsing and DuckAI experiences against emerging threats (e.g. prompt injection)
• ▹Conduct browser and sync security audits (special pages, DuckAI integrations, password manager)
• ▹Execute SERP security mitigations: XSS prevention, tooling to help engineers write safer code
• ▹Build and maintain harnesses that ship security fixes automatically
• ▹Manage application security scanning infrastructure
• ▹Run internal red-team operations (simulated attack scenarios)
• ▹Support security triage

Requirements

• ▹7+ years of experience in web or application security (assessments, vulnerability research, penetration testing, secure code review)
• ▹Recent experience creating security-focused agentic harnesses
• ▹Experience influencing large feature designs to have security baked in from the start
• ▹Advanced programming or scripting experience with JavaScript

Nice to have

• ▹Swift, Kotlin, C# or JavaScript (native apps), or JavaScript, Perl or Go (search)
• ▹Experience with a WebView technology (WebKit, WebView2, Chromium WebView) and browser security models (SOP, CSP, CORS, SameSite)
• ▹Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection, authorization flaws)
• ▹Familiarity with security testing tools and frameworks
• ▹Experience partnering with product engineers on security matters
• ▹Experience shaping an organization's security practices

Soft skills

What we offer

• ▹$178,500 USD annually plus stock options
• ▹Transparent, level- and region-based compensation with stock options
• ▹Company-sponsored health benefits (US-based team members only)
• ▹Paid parental leave, office setup and co-working allowances
• ▹2 in-person company gatherings per year (all-hands and team retreat)

About the company

DuckDuckGo is a remote-first online protection company founded in 2008, profitable since 2014, with 300+ team members and over $100M USD in annual revenue; its browser, search engine, and AI-powered Duck.ai are used by millions.