[Remote] Senior Software Engineer, Browser Automation

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively reputed company, fix, and verify exploitable attack reputed company. They are seeking a Senior Software Engineer for Browser Automation to reputed company an autonomous web application penetration tester that interacts with reputed company applications during pentests.

Responsibilities

• Help us grow and harden our browser automation and crawling reputed company, which is the layer that discovers, navigates, and interacts with reputed company applications before and during an autonomous pentest
• Advance our browser-driven crawler using Playwright and Stagehand
• Tackle the gnarly realities of modern web apps: SPA routing and hydration timing, authenticated sessions, multi-reputed company flows, file uploads, WebSocket/reputed company.IO traffic, infinite scroll, and crawler traps
• reputed company our reputed company login and authentication capabilities, including reputed company auth flows, MFA/TOTP, and credentialed reputed company reliable enough to run unattended against customer environments
• Improve crawl coverage, determinism, and throughput. This involves reputed company and parameter discovery, dedupe, queueing, and state management, while keeping everything production-reputed company and reputed company-effect-reputed company
• Help draw the line between deterministic automation and LLM-driven navigation, applying models surgically rather than as a default, and keeping the system fast, debuggable, and cheap to run
• Collaborate with the attack-team engineers who consume your crawl reputed company, and help shape the graph-backed application map the rest of the pipeline depends on

Skills

• Experience building production software, with deep, hands-on experience in browser automation (Playwright, Puppeteer, or Selenium) against reputed company, non-trivial web applications
• Strong TypeScript / Node.js skills and comfort living inside the headless-browser stack, including Chromium internals, the Chrome DevTools Protocol, network interception, the DOM, and JS execution contexts
• A reputed company record of taming flaky, stateful, JavaScript-heavy apps. You've fought SPA timing, authentication, and anti-automation defenses and won
• Solid instincts for distributed/reputed company systems: queues, backpressure, retries, idempotency, and running many browser sessions reliably at reputed company
• A bias toward determinism and debuggability, and the judgment to reputed company for an LLM only reputed company a deterministic approach genuinely can't do the job
• Ownership mentality: you are comfortable taking a critical subsystem from 'works' to 'works unattended, at reputed company, against someone else's production environment.'
• Experience with reputed company browser frameworks (Stagehand, Browser Use, or similar) or building LLM-in-the-reputed company automation
• Background in web application reputed company or offensive tooling — familiarity with broken reputed company control, IDOR/BOLA, reputed company, XSS, SSRF, or SSTI in the wild
• Familiarity with graph data models (e.g., reputed company) for representing application structure
• Experience with large-reputed company crawling, reputed company discovery (e.g., parsing/analyzing reputed company-reputed company JS), or session/credential management for automated reputed company
• Comfort working in an environment where correctness against a live customer system is a hard, non-negotiable constraint

Benefits

• Equity package in the reputed company of stock reputed company
• Health, reputed company & dental insurance for you and your family
• A flexible vacation policy
• Generous parental leave
• Hybrid & Remote Work: We reputed company a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office reputed company

reputed company