Senior Software Engineer - Browser Extensions

Senior Software Engineer - Browser Extensions

About Nudge Security

Nudge Security delivers AI and SaaS security governance at the Workforce Edge, where employees make thousands of technology decisions every day. Our automated, policy-driven guardrails reach employees when and where they work, enabling rapid technology adoption while minimizing risk and sprawl. Through unrivaled discovery capabilities, AI-driven risk insights, and behavioral science-based engagement, we make security a natural part of how modern work gets done rather than an obstacle to innovation. Nudge Security was founded in 2021 by Russell Spitler and Jaime Blasco and is backed by Ballistic Ventures, Forgepoint Capital, Cerberus Ventures, and Squadra Ventures.

We're looking for exceptional Senior Software Engineers who thrive in high-growth environments, love building new business, and are excited to help shape one of cybersecurity's fastest-growing categories.

Summary

As a Senior Software Engineer on the browser extension team, you'll be equal parts builder and architect. Beyond shipping high-quality extension features, you will drive the technical design of the extension platform itself: architecting solutions to genuinely hard problems like reliably observing authentication flows across thousands of SaaS apps, intercepting and interpreting OAuth grants in real time, managing credentials safely within the browser's security model, and monitoring AI platform usage; all while staying performant and private to the end user.

You'll set the technical direction for the extension, lead design reviews, and raise the bar for engineering quality across the team. Over time, we expect this person to grow into broader technical leadership of the extension team while remaining hands-on. You'll work remotely as part of a distributed team of engineers in a fast-paced, high-security environment characterized by continuous delivery and rapid feature growth.

What You'll Do

• Extension Development

  • Design, develop, and maintain high-quality browser extensions across Chromium-based browsers (Chrome, Edge), Firefox, and Safari.

  • Implement extension features that handle sensitive operations, including authentication monitoring, password management, and AI platform monitoring, with security and privacy as first principles.

  • Ensure cross-browser compatibility, optimal performance, and resilience against the constant churn of browser API and web platform changes.

• Technical Design & Architecture

  • Own the technical architecture of the extension: content script / service worker boundaries, messaging patterns, state management, data pipelines back to the platform, and update/release strategy.

  • Lead technical design for hard problems — turning ambiguous product goals into well-reasoned designs, prototypes, and phased delivery plans.

  • Author design documents, run design reviews, and establish engineering standards and patterns the whole team can build on.

  • Mentor other engineers through code review, pairing, and design collaboration, raising the overall technical bar of the team.

• Authentication & Identity Expertise

  • Apply deep knowledge of how authentication actually works on the web — OAuth 2.0 /OIDC flows and grant types, SAML and SSO, session and token lifecycles, passkeys, and MFA — to detect and interpret identity events happening in the browser.

  • Reason about the browser security model (site isolation, CSP, permissions, cookies and storage partitioning) and its implications for what the extension can safely and reliably observe.

• AI-Accelerated Development & AI in Product

  • Use AI development tools (e.g., coding agents and assistants) as a core part of your daily workflow, and help the team develop effective patterns for AI-assisted engineering.

  • Contribute to AI-powered product capabilities, including detection and monitoring of AI platform usage in the browser and integrating LLM-driven features into the extension experience.

How You'll Partner With Other Roles

• Product & Design

  • Translate product requirements into technical designs and phased delivery plans; push back with data when the browser platform makes an approach infeasible, and propose better ones.

• Platform Engineering

  • Define the contracts between the extension and the backend —telemetry, detection signals, and policy delivery — and evolve them as the product grows.

• Security Engineering

  • Collaborate on threat models for the extension itself, secure handling of credentials and tokens, and safe rollout practices for software that runs inside customers' browsers.

• Product Success & Support

  • Investigate tricky customer-environment issues (managed browsers, enterprise policies, unusual IdP configurations) and feed the fixes back into a more resilient product.

What You'll Bring

Required

• 5+ years of professional software development experience, with demonstrated ownership of technical design and architecture for a significant product or system.

• Proven experience developing and shipping web browser extensions (e.g., Chrome, Firefox, Edge, Safari), including deep familiarity with extension internals: Manifest V3, service workers, content scripts, message passing, permissions models, and web store review/release processes.

• Strong technical understanding of authentication on the web: OAuth 2.0 grant types and scopes, OIDC, SAML/SSO, session management, cookies, and token handling.

• Strong proficiency in TypeScript and JavaScript, with a solid grounding in web platform fundamentals (HTML, CSS, DOM, networking).

• Hands-on experience using AI tools for software development, and enthusiasm for making AI a multiplier for the team.

• Excellent written and verbal communication — you can write a design doc that convinces skeptics and explain a subtle browser behavior to a non-expert.

• A security mindset, or a strong desire to develop one: you instinctively ask "how could this be abused?"

Preferred

• Experience with extension frameworks such as Plasmo and/or WXT, and with React or other modern JavaScript frameworks.

• Experience building or integrating LLM-powered features into a product.

• Experience shipping software into enterprise environments: managed browsers, group policies, and enterprise extension deployment.

• Familiarity with CI/CD pipelines for extension build, signing, and multi-store deployment.

• Experience leading or mentoring a small team of engineers.

• Background in security, identity, or the broader cybersecurity product space.

• Startup mindset: you thrive with ambiguity, prioritize ruthlessly, and build pragmatic solutions over perfect ones.

   

Why Nudge Security?

At Nudge Security, you'll have the opportunity to help define one of cybersecurity's fastest-growing categories while working alongside an experienced leadership team with a proven track record of building successful security companies. You'll represent a differentiated platform that solves one of today's most pressing enterprise security challenges and make a meaningful impact at a high-growth company backed by leading cybersecurity investors. Most importantly, you'll be part of a collaborative, customer-first culture where your ideas, contributions, and success truly matter.

Compensation + Benefits

• Competitive salary and benefits, including health insurance, 401K, options, and PTO.

• Fully remote position, with the opportunity to work with an experienced and passionate team of professionals from around the world.

• Excellent career growth and advancement opportunities within a rapidly growing company in the cybersecurity sector.

• Individual compensation is determined based on experience, skills, location, and other job-related factors. Your recruiter will provide additional details regarding compensation during the interview process.