Software Engineer II (Node.js/Security)

TL;DR

Software Engineer II (Node.js/Security): Strengthening Kibana's security posture and building robust platform security features with an accent on vulnerability management and secure coding practices. Focus on hardening the codebase, implementing content security policies, and developing AI-powered threat detection tools.

Location: Remote or Hybrid in Spain, Greece, or Portugal

Company

hirify.global is the Search AI Company that provides cloud-based solutions for search, security, and observability, used by over 50% of the Fortune 500.

What you will do

• Lead security hardening efforts across Kibana's codebase and infrastructure, including CSP implementation.
• Build AI-powered tools for automated vulnerability detection, alert triage, and predictive threat analysis.
• Manage third-party dependency security through regular audits and vulnerability assessments.
• Collaborate with security researchers to respond to and remediate vulnerability reports.
• Design and implement security controls for authentication, authorization, and auditing.
• Contribute to threat modeling and security architecture decisions for new features.

Requirements

• 3+ years of web development experience with a focus on secure development practices.
• Strong knowledge of OWASP Top 10 and defense-in-depth strategies.
• Proficiency with JavaScript, TypeScript, and Node.js.
• Experience with security scanning tools such as Snyk, CodeQL, or HackerOne.
• Hands-on experience implementing CSP, CORS, and browser security controls.
• Must be based in Spain, Greece, or Portugal.

Culture & Benefits

• Competitive pay based on performance and role impact.
• Health coverage for employees and their families in many locations.
• Flexible schedules and locations within a distributed company environment.
• Generous annual vacation allowance and a minimum of 16 weeks of parental leave.
• Company matching for financial donations up to $2000 and 40 hours per year for volunteering.