Hi, we're The Browser Company 👋 and we're building a better way to use the internet.
Browsers are unique in that they are one of the only pieces of software that you share with your parents as well as your kids. Which makes sense, they're our doorway to the most important things — through them we socialize with loved ones, work on our passion projects, and explore our curiosities. But on their own, they don’t actually do a whole lot, they’re kind of just there. They don’t help us organize our messy lives or make it easier to compose our ideas. We believe that the browser could do so much more — it can empower and support the amazing things we do on the internet. That’s why we’re building one: a browser that can help us grow, create, and stay curious.
To accomplish this lofty task, we’re building a diverse team of people from different backgrounds and experiences. This isn’t optional, it’s crucial to our mission, as we need a wide range of perspectives to challenge our assumptions and shape our browser through a bold, creative lens.
With that in mind, we especially encourage women, people of color, and others from historically marginalized groups to apply.
About The Role
Browsers know everything about us and what we do every day. As our second Software Engineer, Security at the Browser Company, you will lead our high-level security and risk-mitigation strategy and perform a wide range of tasks, such as security reviews and threat modeling. You will also develop and implement security strategies specific to AI technologies, work with our IT firm to maintain secure IT practices, collaborate with our CTO and senior architects to secure our infrastructure and build systems, and more to protect our users and their data.
Overall you will...
Own our security strategy and be responsible for mitigating risk for employees and users
Be responsible for threat modeling of our system and features
Conduct security reviews of new, high-risk code and features that our product engineers ship
Work with engineers to educate them about security best-practices, including handling large language models (LLMs) and processing untrusted data
Develop AI security strategies to mitigate risks associated with AI technologies and manage AI security incident responses
Partner with our CTO and IT firm to roll out security improvements to our IT systems
Develop security policies and procedures, and roll them out across the organization
Audit and work with third-party vendors to ensure our data is secure
Work with our CTO, lawyers, and other engineers to fulfill compliance requirements
Manage security incident responses
After 1 month you will...
Get onboarded onto the team and codebase with an onboarding buddy
Receive a number of onboarding presentations on how we give each other feedback, the phases a startup goes through, our technical strategy, and more
Get familiar with our application, infrastructure, data stores, and existing security policies
Have shipped a few bug fixes and features across our codebase
Have pair programmed with a portion of the engineering team
After 3 months you will...
Be the point of contact for security reviews across some portion of our codebase
Be working with our retained security firm and have a strong understanding of our security roadmap
Partnering with our IT firm to maintain security related IT Initiatives
Have a strong grasp on our security needs and start prioritizing which projects we need to move forward
Be regularly posting feedback about using the browser in our #dogfooding channel
Understand the AI threat landscape and mitigate major AI security hazards or prompt injections
After 6 months you will...
Conduct security reviews across our server and client repositories
Collaborate with engineers to figure out how to bake security into our architecture
Own our security strategy and prioritize security projects to move forward
Own our security policies and procedures, and ensure we adhere to them
Support and lead security incident responses across the organization
Be interview trained and interviewing candidates for roles at the Browser Company
Qualifications
You have 5+ years of experience leading large scale security projects and operations
You have experience conducting security reviews for application and infrastructure changes
You have excellent communication skills and are able to work cross-functionally with Legal and IT to develop and implement new security policies and procedures
You care deeply about user privacy and are vigilant about mitigating risks
You have experience working across a variety of complex codebases
You have experience tech leading critical projects or initiatives within your team and organization
You have at least 4 hours of overlap time with team members located in Eastern Time Zone
Compensation and Benefits
With our flexible compensation model, employees have the ability to design their compensation according to their needs. People join startups for different reasons and we want to be accommodating and flexible to everyone’s lives. Every candidate approved for an offer receives two options:
✉️ The first offer is a lower salary with a higher equity package
✉️ The second is a higher salary with a lower equity package.
Candidates can choose either option or anywhere in between the two on a sliding scale. The annual salary range for this role is $150,000-$300,000, and the actual salary range offered will vary based on experience level and interview performance.
🧘🏻♀️ In addition to a competitive salary and equity package, we provide every employee with the following benefits:
comprehensive benefits package, with employee medical, dental, and vision premiums covered at 100%
401k plan
flexible vacation policy: on average, our team members take between 15-20 vacation days plus federal holidays (holidays vary by location)
12 weeks of paid parental leave
$1,500 USD home office stipend
Employees based in the US also receive free annual memberships to One Medical, Talkspace, Teladoc, and HealthAdvocate
The Browser Company is a well-funded, ambitious startup of about 70 people (and growing!) who are passionate about building great products. We are a remote-first, distributed team, with the option to work in office in New York. We strongly support diversity and encourage people from all backgrounds to apply.
🚙 To read more about what we value as a company, check out Notes on Roadtrips on our blog.