Security Engineer – Node.js Proactive Defense

About the role

We are seeking a highly autonomous Security Engineer to create a next‑generation runtime protection product for Node.js applications. Based in South Africa, you will combine security research, engineering, and product ownership to protect modern web applications without customer intervention.

Key responsibilities

• Define and build a new security product line focused on runtime protection for Node.js.
• Set technical strategy, including instrumentation methods, deployment models, language choices, and detection approaches.
• Design, develop, test, and iterate the solution from concept to production.
• Establish detection methodologies to differentiate malicious activity, vulnerabilities, and legitimate behavior across frameworks.
• Leverage large‑scale threat intelligence, malware data, reputation signals, and AI‑assisted tools to improve protection.
• Optimize performance, false‑positive/negative rates, and customer impact.
• Collaborate with security specialists, architects, and engineering teams while maintaining technical ownership.

Required profile

• Strong experience with the Node.js runtime and JavaScript ecosystem.
• Solid understanding of web application security principles and current exploitation techniques.
• Proven ability to design reliable detection logic at scale with minimal false positives.
• Experience building security tools, runtime security products, or related engineering systems.
• Self‑starter who thrives in ambiguous, fast‑moving environments.

Required skills

• Node.js
• JavaScript
• Web application security
• Malware detection
• Runtime instrumentation
• AI coding assistants
• Large‑scale threat intelligence integration