Job description

About c/side:

c/side is laser focussed on solving web security, starting with browser side injections. Covering previously unmonitored attack surfaces in developer and user friendly ways.

The team of c/side are a diverse mix of highly capable subject matter experts. We’re kind but we mean business.

Since January 2024, c/side has raised $ 7.7 million in pre-seed funding from Uncork Ventures, Mantis Ventures, Scribble Ventures, Roar VC, Dan Scheinman, Jason Warner, Kathy Korevec and many more. A team of handpicked, high value add investors invested in helping our company and team grow.

About the role:

This is a special and super important role for us: we are looking for an engineer with deep interest in security to help us build new detection methods, monitor threats as they happen and play around with our massive amount of data on script behaviours to prevent client-side attacks for our customers.

What you will do:

Keep an eye out on attacks around the world, we have a lot of data and keep an eye on a lot of websites. There is always a new attack method to be found. We want you to find it, develop a detection method, use existing attributes where possible and ship it!
Review detections that happen with some of our existing in-house detections. Some may catch something we’ll want to narrow down on.
Build new detection methods and rules for new attacks. A deep understanding of JavaScript would help here. However, a large range of our detection systems use Rust.
Proactively define detections for client-side behaviours that can be malicious and review this against our script data.
Use and build internal tools to detect never seen before attacks.

About you:

You love a cat and mouse game!
The fact that you are in a key position to stop bad actors from impacting unknowing individuals motivates you.

You have a deep understanding of JavaScript, browsers and ideally also some background in Rust and Yara rules.
Finding the gap between the specification of client-side JS and how JS engines are built is a hobby project for you.
You've been playing with LLMs and would love to use AI in security detections
You’ve participated in capture the flag events or regularly spend time doing white hat hacking or bug bounties.
You’re self managing and want to disrupt the client-side (and web) security market.
You have at least 3-5 years prior work experience.

At c/side:

We’re constantly learning and developing better, we grow together
We do not ship half projects, we do not sell snake oil, we don’t cut corners - out of respect for our team, our customers and our community. We put a dent in the universe by building good products
We believe in strong opinions loosely held. We’re passionate and we strive to build the best thing together.

C/side offers:

2-3 Offsites per year (this changes from time to time)
Generous work from home allowance
Latest Macbook
Stock options
Market rate salary
Take what you need PTO
Fully remote, 4h overlap with UK working hours required
Our team is invested in your long term career development. If you want to talk at events, we’ll make that happen, if you want to learn how to build your own startup one day, we’ll offer you a front line seat. C/side is built by folks like you.

We’re building a world class security company, and we simply want the best people for the job. We do not select or discriminate based on formal educational background, age, skin tone, religion, national origin, sexual orientation, gender identity, disability status, marital status, veteran status… we’re welcoming all and celebrate equal opportunities.

Required profile