Job intelligence
Senior Web Security Engineer, Browser Platform
DuckDuckGo
Executive opportunity brief
The decision in one screen
A compact evidence-first read of compensation, flexibility, mobility and what still needs verification. No universal quality score is used.
Fast read
Opportunity DNA
What stands out most is that location flexibility looks unusually broad. The biggest counterweight is that the experience requirement raises the entry bar.
Current comparable position is around the 50th percentile.
No material geography, office-attendance or timezone restriction is visible in the available wording.
One or more material qualification requirements are stated and may narrow the realistic applicant pool.
Sponsorship and relocation support are not clear from the current listing.
Part of the application route can be assessed, but the full external process may contain additional steps.
At least one recent enabled source can still renew this vacancy.
This fingerprint summarizes what is clear, constrained or still unanswered in the current listing. It is a reading aid, not an overall job score.
Decision evidence check
4 of 5 core facts stated
This checks whether the listing states the facts that commonly change an employment decision. It measures disclosure completeness, not whether the opportunity is good or bad.
Facts already stated
- Compensation
- Work arrangement
- Location eligibility
- Employment type
What to verify next
- Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
Unknown information is never converted into a negative score. The questions above exist to prevent missing evidence from being mistaken for a favorable term.
Decision levers
What could make or break the fit?
Reasons to look closer
- Location flexibility looks unusually broad: The available wording supports high Remote Freedom without a material geography, office-attendance or timezone restriction showing up.
Trade-offs to weigh
- The experience requirement raises the entry bar: The listing appears to require at least about 7 years of experience.
Questions worth asking before you invest more time
- Confirm whether a degree is actually required, preferred, or replaceable with equivalent experience.
- Ask whether visa sponsorship is available before investing significant time in the application.
These questions come from details the listing leaves open. An unanswered point is not treated as a disadvantage.
Opportunity neighborhood
Keep your options open
These live roles sit close enough to this opportunity to make useful comparison points. Look across several employers before deciding what pay, flexibility or access trade-offs you are willing to accept.
Security Engineer
Roboflow · Europe, USA
Why it is nearby: Same seniority band · Similar work arrangement · Same employment type
About 2% higher advertised midpoint
Senior AI Information Security Engineer
Tenable · USA
Why it is nearby: Same seniority band · Similar work arrangement · Same employment type
About 20% lower advertised midpoint
Senior Product Security Engineer
AlphaSense · Ireland
Why it is nearby: Same seniority band · Similar work arrangement · Same employment type
Senior Security Engineer - Remote
Parity · Remote
Why it is nearby: Same seniority band · Similar work arrangement · Recently posted
This neighborhood is drawn from current inventory in the same broad occupation. Similarity is based on explicit listing facts; missing details do not count against a job.
Role market context
How much current choice is visible around this kind of work?
This compares the vacancy with current High Paid Job inventory in the broad Cybersecurity roles family. It describes visible choice and disclosure, not future demand or career quality.
200 most recent current roles sampled for the disclosure measures below.
Distinct employers in the bounded current sample, not an estimate of all employers hiring in the market.
Current sampled roles stating at least four of the five Core Decision Facts.
Requires a numeric amount, explicit ISO currency and supported pay period.
Listings with explicit enough remote, hybrid or on-site evidence to classify.
Missing deadline evidence remains unknown and is not interpreted as an open-ended application window.
Currencies with explicit pay evidence in the sample: USD (57) · EUR (6) · GBP (4) · PLN (1). Raw amounts across different currencies are not compared.
This describes current visible High Paid Job inventory in the same broad occupation family. Percentages use a bounded recent sample and are not a forecast, a complete labor-market census or an employer-quality measure.
Constraint opportunity lab
What changes the size of the current opportunity pool?
Each line applies one stricter evidence-based constraint to the same bounded current role-family sample. It helps you see the trade-off in visible choice without deciding which trade-off is right for you.
Counts only affirmative or possible sponsorship evidence, or relocation explicitly offered. Unknown is not treated as no.
A much stricter subset: only listings with explicit worldwide-remote evidence remain.
Only same-currency opportunities with usable annualized pay enter this comparison. Other currencies are not converted or treated as lower.
Shows the subset with enough stated evidence for a more informed first comparison.
Counts roles explicitly classified as worldwide remote, region-restricted remote or remote with restrictions still unclear.
Requires amount, explicit ISO currency and a supported pay period. Missing pay evidence remains unknown.
Includes roles whose seniority is genuinely unspecified rather than assuming they belong to another level.
Uses only roles with a stated employment type.
These are counterfactual filters over a bounded sample of current HPJ inventory in the same broad occupation family. They show how visible choice changes when one evidence-based constraint is applied; they do not tell you which constraint you should choose or predict hiring outcomes. The calculation uses the 200 most recent current roles from 290 visible roles in this broad family.
Salary transparency context
Is pay disclosure typical for this kind of role?
This listing states usable structured compensation. About 34% of the bounded current role sample does the same.
Compensation counts only when amount, ISO currency and supported pay period are all known.
Pay disclosure is limited in the current role sample.
This employer’s current visible listings disclose pay materially more often than the current same-role sample.
This compares salary-disclosure behavior in current visible listings. It does not compare raw salary amounts across currencies, infer undisclosed pay as zero, or rate employer quality.
Private offer & negotiation lab
Turn an offer into evidence, not guesswork
Enter an annual base offer and, if you want, your own target. HPJ compares only within one explicit currency and never chooses a target for you.
Negotiation evidence available: advertised pay range, current same-currency market context, strong decision evidence.
Enter an annual base offer to compare it with explicit same-currency evidence. HPJ will not suggest a target for you.
Review the full package · 10 terms
Mark what is confirmed, what needs clarification and what you want to prioritize. These choices and notes stay in this browser.
Usable advertised compensation is available.
Variable compensation is mentioned; verify amount, formula, target and eligibility.
Equity or long-term incentive language is mentioned; verify grant type, vesting and valuation basis.
Retirement or pension benefits are mentioned; verify employer contribution and vesting.
Health-benefit language is mentioned; verify coverage, dependants and employee cost.
Paid-leave language is mentioned; verify the exact entitlement and carry-over rules.
A work-arrangement signal is available; verify schedule details before relying on it.
Relocation support not established
Sponsorship not established
A review cycle is mentioned; verify timing and whether compensation can change at that review.
Questions worth taking into the offer conversation
- What retirement or pension contribution does the employer provide?
- What health coverage is included and what costs remain with the employee?
- How much paid leave is provided and what are the carry-over or blackout rules?
- If relocation is relevant, what expenses, timing and repayment conditions are covered?
- What exact sponsorship or work-authorization conditions apply to this role?
- When is the first performance and compensation review after joining?
- Is there a firm application deadline, a rolling review window or no stated closing date?
Occupation intelligence
What broader career references connect to this role?
HPJ uses broad comparison families for current-market analysis. External taxonomy results are reference candidates for that broad family, not a declaration that this vacancy has been authoritatively classified into a specific occupation.
European occupation references
- cyber incident responder
- cybersecurity risk manager
- ethical hacker
- digital forensics expert
- director of compliance and information security
This service uses the ESCO classification of the European Commission.
U.S. occupation references
- Information Security Analysts 15-1212.00
- Digital Forensics Analysts 15-1299.06
- Penetration Testers 15-1299.04
- Information Security Engineers 15-1299.05
- Security Management Specialists 13-1199.07
This site incorporates information from O*NET Web Services by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). O*NET® is a trademark of USDOL/ETA.
Career reference research
Skills worth investigating
Official occupational context, paired with exact phrases visible in this vacancy. It is not a skills test or an applicant-fit score.
ESCO · European occupation
cyber incident responder
Usually essential in this ESCO occupation
- security engineering
- ICT security legislation
- ICT network security risks
- attack vectors
- risk management
- building systems monitoring technology
- communicate with stakeholders
Context-dependent ESCO skills
- provide user documentation
- cloud security and compliance
- project managementPhrase in listing
- ensure proper document management
- cloud monitoring and reporting
O*NET · U.S. occupation
Information Security Analysts
O*NET occupation skills
- Reading Comprehension
- Critical Thinking
- Active Listening
- Complex Problem Solving
- Speaking
- Writing
- Judgment and Decision Making
- Monitoring
Build my private skill preparation brief Your evidence · Practice · Interview questions
Plan how you might demonstrate or investigate occupational skills. These are broad-family reference examples, not confirmed vacancy requirements. Nothing you enter is sent to High Paid Job.
Private to this browser. Up to 20 reference skills; not a qualification assessment or hiring prediction.
Useful next question: Which of these occupational reference skills does the hiring manager actually expect for this specific role, and what evidence would demonstrate them?
These skills belong to one reference occupation selected for HPJ’s broad career family, not a verified classification of this vacancy. Text overlap only means a phrase appears in the available listing text; it does not establish an employer requirement, your proficiency, or a qualification gap. A missing mention is unknown, not a deficit.
Adjacent current roles to investigate
Senior Staff Data Scientist
Netlify · Anywhere in the World
same seniority band · same employment type · similar work-arrangement evidenceSenior Full-Stack Engineer (Web + Infrastructure)
Searoutes · Germany
same seniority band · same employment type · similar work-arrangement evidenceDevOps Engineer
Skatteverket · Göteborg, Västra Götalands län, Sverige
same employment type · similar work-arrangement evidenceAdjacent-family roles are exploration prompts from current HPJ inventory. They are not inferred qualification matches and they do not imply a promotion path.
Career move map
What sits one step away?
This listing is currently read as Senior / lead. Nearby roles one visible seniority step away can help you judge whether to widen the search, stretch upward or compare the responsibilities more carefully.
Broader-entry direction
Infrastructure & Endpoint Security Engineer
Devoted Studios · Remote — Worldwide
Similar work arrangement · Same employment type · Recently postedCyber Security Analyst - Defender XDR Specialist | Warsaw (Full Remote)
Intertek · Remote — Worldwide
PLN 155,000–204,000 / year Similar work arrangementStretch direction
Principal Security Engineer, Infrastructure Security
OpenAI · USA
USD 401,000–510,000 / year Similar work arrangement · Same employment type · Recently posted Advertised midpoint is about 155% higherDirector, Information Security
Carrot · USA
USD 188,000–245,000 / year Similar work arrangement · Same employment type · Recently posted Advertised midpoint is about 21% higherThese are live roles one visible seniority step away in the same broad occupation family. They can reveal nearby options, but they are not a guaranteed promotion path and do not account for your personal experience.
Skill bridge
What does this role connect to?
This listing names several concrete skills, but they do not currently overlap with the most frequently surfaced skill labels in the sampled Cybersecurity roles opportunities.
Skills named in this listing
Shared with the current career sample
The recognized skills in this listing do not overlap with the current top-skill list for this occupation sample.
Additional signals in this listing: C# · JavaScript · Kotlin · Project Management
Application edge
- If these skills match your background, prepare one concrete example that shows how you used C#, JavaScript, and Kotlin rather than relying on a keyword-only claim.
- The listing states about 7 years of required experience. Check that the dates and scope in your application make that experience easy to verify.
- The listing mentions extra application steps. Review those requirements before starting so you can prepare the requested material in one pass.
If the named skills are genuinely transferable in your own experience, the occupation map also points to adjacent current families worth researching: Software engineering roles and Data & AI roles. This is exploration context, not a qualification match.
Skill signals come from explicit text mentions. A mention is not automatically a requirement, and absence from the current top-skill list does not make a skill rare or unimportant. The current career comparison draws on 62 sampled listings; 60 contain a recognized skill signal.
Application Decision Lab
Turn the listing into a preparation plan
Separate what the listing actually states from what you still need to prepare or verify. Your selections and short notes stay in this browser and are never submitted to High Paid Job.
At least about 7 years of experience required
The available wording contains an explicit minimum/required years-of-experience signal. Preferred years are tracked separately and never promoted into the required minimum.
C#
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
JavaScript
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Kotlin
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Project Management
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Prepare for a stated application step
A background or pre-employment screening step is explicitly mentioned.
Questions worth resolving before you rely on the opportunity
- Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
- Work authorization / sponsorship: If sponsorship or work authorization matters to you, what exact immigration or employer-sponsorship conditions apply to this role?
Decision analysis
What the listing really tells you
A closer look at Senior Web Security Engineer, Browser Platform at DuckDuckGo points most strongly to compensation has enough depth for comparison, the location rules are clear enough to judge, and the entry path is becoming clearer. Those signals shape the practical upside and the questions still worth asking.
Compensation has enough depth for comparison
Among 24 current comparable salaries in USD, the normalized annual midpoint is around the 50th percentile. This compares advertised pay in the same currency and does not include every element of total compensation.
The location rules are clear enough to judge
The work-location pattern is “Highly location-flexible”, with Remote Freedom at 96/100.
The entry path is becoming clearer
At least about 7 years of experience required · 1 additional stated barrier. Only requirements actually stated in the listing are counted; anything left unsaid remains unresolved.
The visible application effort can be estimated
Provider-mediated application path · 1 visible process step. The external application may contain additional steps that are not visible from the listing itself.
The listing can be traced to a current source
The opportunity currently has 1 renewable source path across 1 source classes. Multiple independent paths can strengthen continuity, but they are not a substitute for checking the application destination.
How this analysis is assembled
The brief pulls together the parts of the vacancy that can be compared reliably today. Gaps in the listing remain visible instead of being filled with assumptions.
Analysis evidence coverage
How much analysis can the current evidence support?
Uses the explainable High Pay Score within the job’s current occupation/seniority/currency comparison sample.
Measures observable location flexibility and explicit restrictions; it does not determine whether remote work is personally desirable.
The configured source supplied structured salary fields, a usable currency and a focused comparison value.
The source posting date is today.
At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.
There is no universal opportunity score because pay, flexibility and access matter differently to different people. Compare Jobs lets you weight the evidence around your own priorities.
Decision checklist
What is supported, uncertain or worth checking?
This checklist separates supported strengths, visible cautions and missing evidence. It is not an overall recommendation or guarantee that the job is suitable for you.
Supported strengths
- The available work-location evidence indicates strong location flexibility.
Visible cautions
- The listing appears to require substantial prior experience.
- At least about 7 years of experience required
Still unknown
- Visa sponsorship is not established by the available listing data.
Pay vs. barriers
Pay and barrier context available
The current pay position can be viewed alongside the stated barriers, but the available detail does not support a stronger conclusion.
Comparable disclosed-pay evidence places this job at about 50 / 100 within its current occupation/seniority sample.
1 explicit required barrier is visible in the available wording.
The listing states at least about 7 years of required experience.
- Education requirement is not established.
This section weighs pay context against clearly stated barriers without collapsing unlike requirements into one universal score. Degree, experience, licensing, clearance and location limits remain separate, and missing qualification details stay unknown.
Beyond the headline
Not enough evidence for a hidden-value finding
Potential hidden value appears only when several distinct non-pay advantages are actually supported. Missing requirements or benefits are never counted as positives.
The annualized salary midpoint is at or above about 50% of the current comparable disclosed-salary sample.
The observable Remote Freedom evidence is strong and contains few explicit restriction signals.
Still check: At least about 7 years of experience required · The current application path is provider-mediated rather than directly classified as an employer-authorized or official route.
Hidden Value is an experimental evidence summary, not an investment-style score or guarantee of employability. It only uses explicit current listing evidence and does not infer that an unmentioned qualification is unnecessary.
Explainable opportunity highlight
Why this opportunity stands out
These are supported signals from the current listing and comparison sample—not a guarantee that this is the best job for you.
The observable work-location signals indicate unusually strong location flexibility.
The source posting date is today.
Compensation intelligence
How competitive is this pay?
Within the current market range
The annualized midpoint is within about 2% of the current comparable median, so the difference is treated as effectively tied rather than meaningfully higher or lower.
The highlighted band is the middle 50% of the current comparable sample after the outlier guard. The dark marker is this job’s annualized salary midpoint.
Why this analysis?
- This score reflects the current advertised-pay distribution for comparable active jobs in the same currency. It measures pay position, not overall job quality.
- Salary confidence: High. The configured source supplied structured salary fields, a usable currency and a focused comparison value.
- Range quality: Single disclosed value.
Employer compensation communication
Pay transparency at DuckDuckGo
Good current pay transparency
This score uses the employer’s current visible listings and combines how often pay is disclosed with how useful those ranges are. Bonus, equity and benefit mentions are shown separately and do not raise the score.
This pattern comes from the employer’s current visible vacancies. It describes hiring and pay transparency in those listings, not employee satisfaction or a permanent judgement of the employer.
Current employer intelligence
DuckDuckGo — current opportunity snapshot
Employer Evidence Profile
How often this employer’s current visible sampled vacancies state decision-critical information. These percentages describe evidence coverage, not employer quality.
Current sampled listings with advertised compensation evidence.
Current sampled listings whose work arrangement is clearer than unknown.
Current sampled listings with a supported country signal.
Current sampled listings with an explicit closing time.
Current sampled listings with a usable posting date.
Current sampled listings that explicitly indicate confirmed, possible or unavailable sponsorship evidence.
Current sampled listings with an explicit relocation signal.
Low coverage means the current visible listings state the information less often. It does not prove that the employer lacks the policy, benefit or support.
Common current occupation families: Cybersecurity (1) · Software engineering (1) · Finance Accounting (1)
Visible seniority mix: Senior / lead (6)
Current employment-type mix: Full time (6)
Most visible hiring countries in this sample: United States (2) · Slovakia (1)
Other current roles from this employer
Senior Backend Engineer
Anywhere in the World, Pennsylvania
Senior / lead · Worldwide remoteSenior Strategic Finance Manager
Canada, USA
Senior / lead · Region-restricted remoteUSD 190,500–214,767 / yearSenior Data Scientist
Austria, Czechia, Hungary, Ireland, Poland, Portugal, Romania, Slovakia, Spain, Switzerland, UK, USA
Senior / lead · Region-restricted remoteUSD 178,500–178,500 / yearSenior Growth Marketing Manager (Subscriptions)
USA
Senior / lead · Region-restricted remoteUSD 178,500–178,500 / yearThese are other current vacancies visible from the same employer, not endorsements or evidence of future hiring plans.
Current disclosed salary medians by currency
- USD 178,500 median · 5 disclosed salaries
Questions worth asking this employer
- If work authorization matters to you, what sponsorship policy applies to this specific role and location?
- If a move is required, is relocation assistance available for this position?
- What is the expected application and interview timeline if the listing does not state a closing date?
These questions are prompted by missing or thin evidence in the employer’s current visible vacancies. Missing evidence is not treated as a negative judgement.
This employer snapshot uses the employer’s current visible listings. Remote and sponsorship rates use only vacancies with explicit evidence, while missing information stays unknown. Salary medians are shown separately by currency and need at least five disclosed salaries. Zero confirmed sponsorship means none was explicitly found in this sample, not that sponsorship is unavailable.
This snapshot describes the employer’s current visible vacancies—things such as pay disclosure and work arrangement. It is not an employee-satisfaction or hiring-quality rating, and different currencies stay separate.
Work-location intelligence
Remote Freedom
Highly location-flexible
Why this score?
- The source describes the role as open worldwide or globally.
Flexibility signals detected
- Worldwide or global remote eligibility is explicitly indicated.
Remote Freedom measures observable location flexibility only. Unknown work-location information remains unscored. Timezone wording is penalized only when it appears restrictive; general collaboration across time zones is not treated as a restriction. A score does not guarantee legal work eligibility, payroll availability or visa sponsorship.
International applicant intelligence
Visa & relocation signals
Sponsorship status is shown only when the listing provides clear enough wording. Employer history or headquarters location is not used to guess an answer.
The available listing details do not contain a clear enough sponsorship statement.
The available listing details do not contain a clear enough relocation statement.
Tradeoff check
What’s the catch?
These are visible conditions worth checking before treating the headline compensation as the whole story:
- The listing appears to require substantial prior experience.
Current alternatives
Better-paying alternatives
These current roles show a materially higher annualized salary midpoint in the same broad occupation and currency. Similar seniority, country, work arrangement, employment type and recency are preferred where possible; higher pay alone does not make an alternative a better fit.
Staff Security Engineer, Security Enablement
Doordash · Remote — Worldwide
USD 193,800–285,000 / year Worldwide remoteWhy comparable: Same seniority band · Similar work-location arrangement · Same employment type
Staff Product Security Engineer
Reddit · USA
USD 217,000–303,900 / year Region-restricted remoteWhy comparable: Same seniority band · Similar work-location arrangement · Same employment type
Staff Application Security Engineer
Upside · USA
USD 235,000–245,000 / year Region-restricted remoteWhy comparable: Same seniority band · Similar work-location arrangement · Same employment type
Alternatives are drawn from the current inventory rather than presented as application recommendations. A pay difference needs to be meaningful—about 3% or more at the midpoint—and different currencies are not compared.
Application-path intelligence
What can we see about the application process?
Provider-mediated application path
The current application path comes through a publisher or aggregator. The destination may still lead to an employer-authorized hiring system, but that is not clear enough to assume.
Current destination: jobicy.com · HTTPS
Visible application steps or requirements
- A background or pre-employment screening step is explicitly mentioned.
Application effort is estimated from visible listing and source details. Optional steps are kept separate from mandatory ones, and the external form may contain additional requirements that are not visible here.
Application safety context
Application safety check
Basic application-safety context available
The current application destination has a basic transport-safety signal such as HTTPS. This does not verify the employer, vacancy, recruiter or application process.
Evidence checked: Source provenance · Application destination · Listing wording
Observable transport-safety signals
- The available application destination uses HTTPS.
Before you share money or sensitive information
- Confirm the vacancy on the employer’s official careers site when practical, especially if a recruiter contacts you outside the listed application path.
- Check that recruiter email domains and application destinations are consistent with the employer or an identifiable recruiting provider.
- Do not pay application, processing, training or equipment fees merely to be considered for a job.
- Do not send cryptocurrency, gift cards, online-banking credentials or PINs as part of an application.
- Treat unusually fast offers or interviews conducted only through informal messaging channels as reasons to verify the employer independently.
This is a limited safety screen, not employer verification and not a fraud determination. Never send money, cryptocurrency, passwords or sensitive banking credentials merely because a listing appears on a job platform.
Original listing details
The section below comes from the listing source. The decision sections above use the job’s structured pay, location, qualification, mobility and application details to give you additional context.
Who We Are
Hi, we're DuckDuckGo, the online protection company and remote-first team of 300+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, annual revenue now exceeds $100m USD and millions use our browser on on Mac, Windows, iOS, and Android, our search engine, and the DuckDuckGo subscription. We also offer private, useful, and optional AI, including Duck.ai, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place. Our culture of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place!
Your Team and Role
Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include:
-
Browser and sync security audits
-
SERP security mitigations
-
Agentic browser hardening
As a Senior Web Security Engineer, Browser Platform, you'll harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), build and maintain harnesses that get security fixes out automatically, manage application security scanning infrastructure setup, deliver on internal red-team operations (simulated attack scenarios), support security triage, and more!
About You
-
7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review)
-
Recent experience creating security focused agentic harnesses
-
Experience influencing large feature designs to have security baked in from the start
-
Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search).
-
Experience with at least one WebView technology (WebKit, WebView2, Chromium WebView, etc.) and understanding of browser security models (SOP, CSP, CORS, SameSite cookies)
-
Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.)
-
Familiarity with security testing tools and frameworks
-
Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster
-
Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams
Compensation
$178,500 USD annually and stock options. Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation.
Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK.
Our Team Member Support Guide explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances.
Hiring Process
Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire.
Diversity, Equity and Inclusion
DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws.
We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@duckduckgo.com to let us know the nature of your request.
Please note that:
-
You’ll be required to attend meetings on camera via video conferencing
-
Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend.
-
While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week.
-
A successful candidate must pass a background check as a condition of joining the team.
-
By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work.
Disclosure Statement: Use of AI in Hiring Process
As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process.
Key Principles:
-
Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy. We ensure that your personal information is protected and used solely for recruitment purposes.
-
Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors.
-
Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us.
By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us as at careers@duckduckgo.com. Thank you for your interest in joining DuckDuckGo!
#LI-DNI
Listing provenance
Where did this job come from?
See where this vacancy came from and whether more than one current source can still support it. Source names help with traceability and attribution; they are not endorsements or guarantees.
At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.
- Continuity
- One recent renewable source
- Source-class independence
- One renewable source class
- Last source observation
- Observed very recently
This records when High Paid Job last observed the vacancy in source evidence. It confirms source presence, not that the employer edited the vacancy at that time.
- 1 enabled source recently observed this vacancy.
Source confidence is about traceability and continuity. It is separate from application safety and should not be read as an employer reputation rating.
The vacancy is supplied by an external job publisher. Source information helps show where the listing came from; it is not a guarantee about the employer or vacancy.
Listing source: Jobicy. Destination: jobicy.com. The application opens in a new tab so you can keep this report open.