Security Software Engineer, Open Source Frameworks

📋 Description

• Hunt vulnerability classes by analyzing framework internals.
• Drive root-cause fixes to eliminate whole bug classes.
• Own vulnerability disclosure and CVE processes across OSS projects.
• Run OSS bug bounty program; triage reports and coordinate fixes.
• Get security into design early via RFCs and design reviews.
• Build preventive tooling: linters, codemods, CI checks.

🎯 Requirements

• 4+ years in security engineering; OSS contributions preferred.
• Strong JavaScript/TypeScript fundamentals; routing, SSR, middleware.
• Experience with vulnerability research and coordinated disclosure.
• Familiar with OSS security patterns and design-level fixes.
• Pragmatic, shipping security improvements that actually ship.
• Excellent communicator with maintainers and external researchers.

🎁 Benefits

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and grow; mentorship and events.
• Flexible Time Off.
• WFH gear budget to outfit your space.