Browser Security Engineer

Kernel•Cincinnati, OH

1d•$225,000 - $250,000•Onsite

About The Position

Kernel is seeking a Browser Security Engineer to harden and extend its Chromium-based browser runtime. This role involves working at the intersection of sandboxing, networking, and virtualization to ensure secure and efficient browser operation for thousands of concurrent users. The engineer will be responsible for debugging, patching, and optimizing Chromium builds within Kernel’s microVM environments, implementing network isolation, proxy routing, and IP handling, and collaborating with infrastructure engineers on isolation, scheduling, and security policies. Additionally, the role includes building internal tooling for binary analysis, crash triage, and vulnerability monitoring, and supporting secure supply chain and reproducible builds.

Requirements

Deep familiarity with Chromium internals, browser sandboxes, or renderer/network stacks.
Experience with Linux kernel, microVMs (Firecracker, Cloud-Hypervisor, Kata, gVisor, etc.), or container isolation.
Strong debugging skills with strace, gdb, perf, or similar low-level tools.
Knowledge of networking fundamentals (DNS, TCP/IP, NAT, proxies, TLS).

Nice To Haves

Background in security engineering or browser hardening a plus.

Responsibilities

Debug, patch, and optimize Chromium builds running inside Kernel’s microVM environments.
Implement and maintain network isolation, proxy routing, and IP handling for browsers.
Collaborate with infra engineers on unikernel-based isolation, process scheduling, and kernel security policies.
Build internal tooling for binary analysis, crash triage, and vulnerability monitoring.
Support the team in maintaining secure supply chain and reproducible builds for our browser images.