Security Engineer / Staff Engineer

About the role

We are looking for a senior‑level engineer‑architect to build a brand‑new runtime protection layer for Node.js applications from scratch. You will own the product end‑to‑end, delivering a secure solution that runs transparently in production environments.

Key responsibilities

• Define the technical approach and architecture for runtime protection inside the Node.js process.
• Design detection logic to identify and block attacks during application execution.
• Build, launch and iterate the first version of the product in real production environments.
• Ensure protection works without code changes and without breaking legitimate applications.

Required profile

• Strong security engineering or research background with deep understanding of attack vectors and defenses.
• Proven experience building and shipping a product from idea to production with high ownership.
• Ability to solve ambiguous problems independently and make key architectural decisions.
• Intermediate or higher English proficiency.

Required skills

• Node.js runtime knowledge
• Linux production and development environments
• Runtime protection, WAF, instrumentation, malware analysis, incident response
• Experience with AI‑assisted development tools (e.g., Copilot, Cursor)

What we offer

• 100% remote work from anywhere in the world
• B2B contract (sole proprietorship or company)
• Up to $12,000 gross per month
• Opportunity to shape a new product line in a stable, international company