Key Responsibilities:
Vulnerability Research: Identify and analyze vulnerabilities in browser components, system integrations, and third-party libraries relevant to the Enterprise Browser.
Security Testing & Tooling: Develop custom tooling and automation for security testing, fuzzing, and vulnerability detection tailored to our product stack.
Threat Modeling: Collaborate with developers, architects, and the Product Security Lead to assess threat scenarios and attack surfaces for new features and integrations.
Exploit Prototyping: Build proof-of-concepts to validate the impact and exploitability of discovered security issues.
Collaboration & Knowledge Sharing: Support development teams in secure coding practices, and contribute to internal knowledge bases and playbooks.
Security Research Enablement: Stay ahead of the curve by tracking current exploits, security trends, and techniques; attend or present at security conferences and engage with the broader security community.
Strong understanding of browser internals, OS security mechanisms, or application-layer security.
Proficiency in one or more programming/scripting languages (e.g., Python, JavaScript, C/C++, Go).
Experience in vulnerability research, bug hunting, reverse engineering, or exploit development.
Familiarity with common vulnerability classes (e.g. RCE, memory corruption, sandbox escapes).
Curiosity-driven mindset with a passion for breaking things and understanding how they work.
Experience with fuzzing tools, debuggers, or reverse engineering frameworks is a strong plus.
