Senior Web Security Engineer, Browser Platform

DuckDuckGo; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

DuckDuckGo is seeking a security-focused engineer to own web security for the browser platform. You will design and implement security controls, review code, and collaborate with product and engineering teams to ship secure features.

This remote role supports a globally distributed team and requires strong C++ skills and browser security experience. In this position you will work across browser integrations, perform threat modeling and security testing, and develop tooling to instrument and

Qualifications

• Strong experience in web security and browser platforms.
• Proficiency in threat modeling and security testing.
• Experience with browser development tooling and C++.

Responsibilities

• Design and implement security controls for the browser platform.
• Identify, analyze, and remediate security issues in web components and browser integrations.
• Collaborate with product and engineering teams to build secure features.
• Perform threat modeling, code reviews, and security testing.
• Develop and maintain security tooling and instrumentation.

Skills

Web security

Browser platforms

Threat modeling

Security testing

C++

Tools

C++ toolchain

Threat modeling tools

Job description

About the role

DuckDuckGo is a privacy focused search engine. This role owns web security engineering for the browser platform, focusing on protecting users and ensuring secure integrations across the browser ecosystem.

What you'll do

• Design and implement security controls for the browser platform
• Identify, analyze, and remediate security issues in web components and browser integrations
• Collaborate with product and engineering teams to build secure features
• Perform threat modeling, code reviews, and security testing
• Develop and maintain security tooling and instrumentation

What they're looking for

• Strong experience in web security and browser platforms
• Proficiency in C++ and related tooling used in browser development
• Experience with threat modeling, vulnerability discovery, and remediation
• Ability to work effectively in a remote, globally distributed team

For applicants in Nigeria

• The listing lists many remote locations including Nigeria; however, it includes country-specific eligible locations and notes that not all roles are open to candidates in all countries. Confirm eligibility before applying.
• Timezone expectations are not explicitly stated; confirm during interview.
• The listing does not specify contractor vs employee status for this role; confirm during interview.
• Pay currency varies by region and is listed per country; confirm the applicable currency and amount for Nigeria during interview.
• Visa or work-authorization notes are not provided; confirm eligibility during interview.