Are you a JavaScript Frontend Engineer ready to dive into Web Security- (Hybrid – Lisbon)

Cognizant; Lisboa; Presencial; EUR 40 000 - 70 000; Tempo integral

Resumo da oferta

A leading technology company is seeking a JavaScript Security Engineer in Lisbon, Portugal, to secure web applications with a focus on web extensions. The role requires expertise in JavaScript, code analysis, and cybersecurity practices. Key responsibilities include identifying security vulnerabilities, conducting technical consultations, and collaborating with cross-functional teams. Strong communication skills and familiarity with security tools are preferred. This position offers a hybrid work model, allowing for flexible work arrangements.

Qualificações

• Strong hands-on experience with JavaScript and advanced concepts.
• Experience with front-end frameworks like React, Angular, or jQuery.
• Strong code analysis and reverse engineering skills in JavaScript.

Responsabilidades

• Analyze web extension code for security violations.
• Perform reverse engineering and debugging of JavaScript.
• Conduct regular code reviews aligned with secure coding practices.

Conhecimentos

JavaScript

Code analysis

HTML

CSS

Node.js

Front-end frameworks

Debugging

Ferramentas

Burp Suite

Nmap

Descrição da oferta de emprego

JavaScript Security Engineer - Web Browser Vulnerabilities

English Required / Based in Lisbon, Portugal / Hybrid

We are seeking a skilled JavaScript Security Engineer with a strong background in web technologies and cybersecurity to analyze, reverse engineer, and secure browser‑based applications, with a particular focus on web extensions. This role involves identifying malicious behaviors, conducting security assessments, and driving automation and process improvements within the security analysis lifecycle.

Key Responsibilities

• Analyze web extension code using static and dynamic analysis techniques to detect security violations and malicious behavior.
• Perform JavaScript reverse engineering and debugging to understand complex or obfuscated codebases.
• Identify, document, and report security vulnerabilities, including root‑cause analysis and recommended remediation steps.
• Support the takedown and investigation of malicious browser extensions.
• Conduct regular code reviews and provide constructive feedback aligned with secure coding best practices.
• Define and implement detection rules and security patterns to identify violations at scale.
• Identify emerging threat patterns and share insights to enhance team detection capabilities.
• Drive innovative ideas, recommend improvements, and help design and implement automation for existing processes.
• Act as a technical consultant, providing guidance, clarification, and technical grooming to team members.
• Collaborate effectively with cross‑functional teams and maintain clear technical documentation.
• Contribute to continuous improvement of security workflows and tooling.

You Are Someone Who Brings

• Strong hands‑on experience with JavaScript, including advanced concepts such as closures, prototypes, variable scope, hoisting, callbacks, and OOP principles.
• Hands‑on experience with HTML and CSS.
• Knowledge of JSON, AJAX, and ES6/ES7 standards.
• Good understanding of Node.js and Webpack.
• Experience working with front‑end frameworks or libraries such as React, Angular, or jQuery.
• Strong code analysis, debugging, and reverse engineering skills, particularly in JavaScript applications.
• Ability to analyze JavaScript code and identify malicious activities effectively.
• Good communication skills and the ability to work as a collaborative team player.

Added Advantages (Nice To Have)

• Cybersecurity experience or strong security knowledge.
• Familiarity with DAST and SAST methodologies.
• Knowledge of cybersecurity open‑source tools such as Burp Suite, Nmap, or similar tools.
• Understanding of obfuscation and de‑obfuscation techniques.
• Experience writing technical and security assessment reports.