Brave is hiring a Sr. Security Engineer in Security — Remote. The overview below is synthesized from the employer posting on job-boards.greenhouse.io: factual requirements and scope are preserved, but prose is rewritten with editorial context. Verify details and apply via the employer link.
Senior Security Engineer
Remote
About Brave
Company context from the listing:
Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy third-party ads and trackers by default, a private search engine with a truly independent index, a browser-native crypto wallet, and a private ad network (opt-in!) that directly rewards you for your attention.
The internet is a sea of privacy-harmful ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not.
Summary
We are hiring a staff engineer on the Brave security and privacy team! You will help keep our users safe across Brave’s products, including Brave browser and Brave Search.
- Security reviews of Brave products
- Triaging and fixing security reports
- Designing and implementing security-relevant code
- Penetration tests of Brave products and infrastructure
Brave is widely-recognized as one of the best browsers for security and privacy, doing industry-leading work with a team that’s a fraction of the size of Big Tech-supported browsers.
Required qualifications
Experience and skills the team lists as required:
- At least 5 years experience (or equivalent) in security engineering
- Experience in penetration testing and/or security auditing
- Proficiency in C++, both implementing and reviewing
- Strong familiarity with the Web security model
- Experience securing AWS infrastructure
- Very comfortable working and communicating async with a geographically-distributed software development team
- Be comfortable diving into an extremely large, unfamiliar and complex codebase
- Be comfortable with Git and collaborating on GitHub
Preferred qualifications
Experience and skills the team lists as required:
- Experience contributing to large open source codebases and/or participating in open source communities
- Proficiency in Web technologies (HTML, CSS, JavaScript)
- Proficiency in Go and Rust
- DevOps experience
- Contributions to other Web browsers
- Familiarity with Chromium's architecture, especially security
- Ability to write clear technical documentation and less technical writing for blog posts or public communication.
- Be excited about privacy, anonymity, and censorship resistance!
Build a standout application
For the Sr. Security Engineer at Brave, reviewers look for concise evidence over buzzwords. Mirror the language of the posting sparingly, quantify support or delivery outcomes, and show how you handled ambiguity, time-zone collaboration and user empathy. Keep your resume to impact, keep your cover note to one page, and link to artifacts — tickets resolved, docs shipped, dashboards owned — that prove you can operate in a fast-moving Web3 team. Prepare to discuss a time you turned a confusing user report into a clear fix and how you measure quality in support and operations.
Web3 hiring values reliability: on-time follow-through, clear writing, and a track record of improving runbooks and tooling. Treat the application as a work sample. For interviews, be ready to walk through how you prioritize across time zones, handle a difficult user, and decide when to escalate versus resolve directly. Show how you document decisions so the next teammate benefits.
In a distributed Web3 org, trust builds through written clarity. Use the cover note to demonstrate it.