Security Backend Engineer
About The Position
Reflectiz is a fast-growing cybersecurity company specializing in proactive website security. Our unique remote monitoring technology helps organizations reduce security, privacy, and compliance risks-protecting critical digital assets that traditional solutions can’t fully cover.
Since our founding in 2019, we’ve built a global customer base that includes Fortune 500 enterprises and leading brands across North America, EMEA, and APAC. With strong year-over-year growth and a financially solid foundation, Reflectiz offers both stability and exciting opportunities for personal and professional development. Our teams in Israel and the United States foster an inclusive, collaborative culture that combines innovation with professionalism-allowing us to consistently deliver exceptional value to our customers.
Requirements
We’re looking for a hands-on Security Backend Engineer with a strong hacker mindset, someone who enjoys diving into complex systems, questioning assumptions, and breaking things to truly understand how they work.
In this role, you will work at the low-level core of Reflectiz’s web exposure and scanning technology, focusing on the internal mechanics of browsers, backend services, and web applications. You will dive deep into server-side logic and underlying browser mechanisms, uncovering and neutralizing security risks across complex systems.
Responsibilities
- Build and evolve a web scanning engine that actively probes, analyzes, and breaks complex web applications to expose hidden risks
- Develop secure backend services in Node.js and TypeScript that power large-scale scanning and analysis
- Engineer high-performance, heavy-load services designed to operate at scale under real-world traffic and adversarial conditions
- Optimize systems for speed, resilience, and security, balancing deep inspection with production-grade performance
- Hack on Chromium-based browser internals, extending and debugging low-level components to understand how the web really works
- Work closely with security researchers, thinking like an attacker and turning discoveries into robust defenses
Requirements
- 2+ years hands-on with vanilla JavaScript, expert in JavaScript, Node.js, and TypeScript
- Deep understanding of browser internals, DOM, and rendering mechanics
- Solid foundation in web security, detecting and mitigating vulnerabilities in real-world systems
- Ability to quickly grasp complex systems, mentally map architectures, and reason at a low level
- Experience collaborating with Technical Engineers, Customer Success, and Sales to deliver secure solutions
- Hacker mindset: enjoys digging, dissecting, and probing systems, building robust defenses under high-performance conditions
Advantage
- Experience with Chromium internals, enhancing low-level browser understanding for web security
- Hands-on experience with Docker and Terraform, enabling efficient deployment and infrastructure automation
- Deep familiarity with GCP services, leveraging cloud capabilities for scalable, secure backend systems
