SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Neo Security is hiring a Senior Full-Stack Engineer to own the development of their Chrome extension, a core component of their enterprise security platform. This role combines browser-level security engineering with full-stack development across backend services and web applications.
You will architect and maintain the Chrome extension that enforces security policies in real time across managed enterprise endpoints. Key responsibilities include:
- Architecting, building, and maintaining the Chrome extension with a focus on performance and minimal page-load impact
- Owning features end-to-end from design through production monitoring
- Debugging complex issues spanning the browser, OS, and backend layers
- Building in-browser security capabilities: DOM inspection and manipulation, user-facing warning and blocking flows, event capture
- Optimizing extension performance: minimizing memory footprint and CPU usage across all websites
- Driving support for additional Chromium browsers (Edge, Brave) and future expansion to Firefox and Safari WebExtensions
- Managing Chrome extension publishing, versioning, and staged rollouts
- Building and extending backend APIs and services that power the extension, including configuration delivery and real-time updates
- Developing features in the React/TypeScript web app for customer configuration, event review, and deployment management
- Shaping the product's technical direction and raising standards for code quality, testing, and release practices
Tech stack: TypeScript and Chrome Extensions APIs (Manifest V3, service workers, content scripts, native messaging) for the extension; React and Next.js for frontend; Node.js/TypeScript, Go, Postgres, EventBridge, SQS, S3, AWS Lambda, and Pulumi for backend; AWS for infrastructure.
REQUIREMENTS:
- 5+ years of professional software development experience in a relevant role
- Expert-level TypeScript/JavaScript with deep knowledge of browser fundamentals: DOM, event loop, cookies, storage, origins, CSP, and the extension security model
- Production experience with Manifest V3, including service workers, content scripts, and extension messaging
- Strong React experience
- Backend experience building and operating APIs and services
- Strong debugging skills with Chrome DevTools, extension internals, and network tooling
- Security mindset: ability to think adversarially about how malicious pages or curious users could exploit your code
BONUS:
- Experience building security products (DLP, SSE/SWG, enterprise browser)
- Familiarity with Chromium internals or browser source code
- Cross-browser extension development (Firefox, Safari)
