Security Engineer - Node.js Proactive Defense

Accountabilities: Define and build a new security product line focused on runtime protection within Node.js environments. Determine the technical strategy, including instrumentation methods, deployment models, programming language choices, and detection approaches. Design, develop, test, and iterate on the complete solution from concept through production deployment. Establish detection methodologies to distinguish malicious activity, vulnerabilities, and legitimate application behavior across diverse frameworks and libraries. Use large-scale security intelligence, including malware data, reputation signals, and threat feeds, to improve protection capabilities. Optimize the product against key security and business metrics, including runtime performance, false positives, false negatives, and customer impact. Collaborate with security specialists, architects, and engineering teams while maintaining ownership of technical direction and execution. Leverage AI-assisted development tools and modern engineering practices to accelerate delivery and improve quality. Monitor real-world customer telemetry and continuously improve detection logic and protection mechanisms. Requirements: Strong experience with the Node.js runtime and JavaScript ecosystem. Solid understanding of web application security principles and current exploitation techniques. Ability to design detection logic that works reliably at scale while minimizing false positives. Experience building security tools, application protection solutions, runtime security products, or related engineering systems. Strong problem-solving skills and the ability to operate independently in a fast-moving environment. Ability to take ownership of product direction, architecture, engineering execution, and quality assurance. Comfortable working as a hands-on technical owner rather than only managing specifications or reviews. Experience using AI coding assistants and modern development workflows is a plus. Background in malware analysis, incident response, managed hosting environments, vulnerability research, or security research is highly valued. Experience publishing security research, creating vulnerability disclosures, or developing detection rulesets is a plus. Benefits: Fully remote work environment with flexible working hours and the ability to work from anywhere worldwide. Opportunity to work on challenging security projects with direct impact on protecting modern web infrastructure. Strong focus on professional growth and continuous development. Paid annual vacation, public holidays, and flexible sick leave policy. Support for private medical insurance. Reimbursement support for co-working spaces and sports or wellness activities. Dedicated learning and education budget. Opportunity to be recognized and rewarded for innovative ideas and patented solutions. Access to modern engineering tools and resources to support high-impact development.