Staff Software Engineer

Confidential; Palo Alto (CA); On-site; USD 176,000 - 196,000; Full time

Benefits offered by this job

Equity

401k

Job summary

United States Digital Space LLC is seeking a Staff Software Engineer to join their Threat product team, based in Palo Alto. The successful candidate will develop full-stack solutions to enhance threat detection capabilities for various SaaS applications.

You will need extensive experience in browser extension development and strong knowledge of languages like TypeScript and Python, along with an interest in Rust. The role promises competitive compensation, equity options, and engagement with cutting-edge AI security technologies.

Qualifications

• 8+ years of software engineering experience.
• Strong knowledge of browser internals (DOM, event loop, SPA routing).
• Experience with building browser extensions.

Responsibilities

• Develop full-stack solutions for threat detection.
• Work on backend services processing massive event data.
• Create systems that catch sensitive data leaks in AI tools.

Skills

TypeScript

Python

Rust

Elasticsearch

Kafka

Postgres

Browser extension development

Event streaming

Job description

the company | Staff Software Engineer | Philadelphia or Palo Alto | Full-time | $176k-$196k + equity + 401k | https://job-boards.greenhouse.io/obsidiansecurity/jobs/5152706008

We secure the SaaS apps companies actually run on: M365, Salesforce, and hundreds more. You’d be on the Threat product team working full‑stack. That means browser extension code (content/background scripts, manifest v3, message passing), backend services chewing through millions of events, and the data pipelines feeding our detection engine. One day you’re in TypeScript debugging why a content script won’t capture form submissions on some vendor’s weird SPA. The next you’re in Python fixing a Kafka consumer that’s falling behind. Sometimes you’re in Rust optimizing a hot path in the telemetry collector.

Big current focus is shadow AI, i.e. catching when employees paste sensitive data into ChatGPT, Claude, or whatever LLM showed up this week. You’d build the systems that detect it.

Looking for ~8+ yrs experience, real browser knowledge (DOM, event loop, SPA routing, CORS, not just "I used React"), prior browser extension work, strong TypeScript, comfortable in Python, willing to write Rust, plus data‑at‑scale chops (event streaming, Postgres, Elasticsearch, Kafka). Bonus: AI security (prompt injection, exfiltration), detection engineering/SIEM, or security tooling.

Apply via the link above, or see all our open roles at https://www.obsidiansecurity.com/careers