•••••••••• is hiring an experienced security researcher or engineer to build a new runtime protection product for Node.js applications hosted on managed hosting infrastructure.
Responsibilities:
- Define the product, technical approach, instrumentation strategy, and methodology for detecting malicious or vulnerable behavior.
- Build and ship the runtime protection layer end to end, from research and architecture through implementation, release, and production iteration.
- Use threat intelligence from ••••••••••'s existing security stack to improve detection.
- Optimize runtime overhead, false positives, false negatives, and customer-escalation volume.
Requirements:
- Experience building and shipping a new product, security solution, major feature, or technical system from scratch.
- End-to-end technical ownership, including investigation, architecture, implementation, release, and production iteration.
- Strong web application security knowledge and current knowledge of practical exploitation.
- Understanding of how detection rules perform at scale, including avoiding false positives on legitimate code.
- Ability to work hands-on across product management, architecture, engineering, and QA, and direct AI coding agents effectively.
Nice to have: Runtime protection, application firewall, or instrumentation experience; malware analysis or incident response; managed-hosting experience; public security research, vulnerability disclosures, or authored detection rulesets; familiarity with Node.js and the JavaScript ecosystem.
Conditions and benefits: Fully remote work with flexible hours; 24 paid vacation days, 10 national holidays, and unlimited sick leave; private medical insurance compensation; coworking and gym/sports reimbursement; education budget; professional development and challenging projects; potential reward for an innovative patentable idea.