Kernel

Browser Security Engineer

San Francisco · New York · Seattle · Cincinnati

Get past the screening software and onto a recruiter's desk

hirly rewrites your resume for this job — matching the keywords and skills in the posting, moving your most relevant experience to the top, and writing a cover letter to fit. About 30 seconds.

Keywords matched to this posting
Fit score before you apply
Cover letter included

Matched against 2.3M live jobs from 200,000+ employers in 200+ countries.

Tailor my resume for this job →

Apply from your AI assistant

Connect hirly to Claude and ask it to apply to this job. hirly tailors your resume, fills the employer’s form and asks before sending. ChatGPT: manual setup today.

See how it works

Some employer sites stop an application at a CAPTCHA or sign-in and hand it back with a link. Applying needs a paid plan. Works with any assistant that supports MCP.

hirly's read of this role

Role family: Engineering
Seniority: Mid level
Stated salary: $225,000 – $250,000 per year
Country: US
Work mode: On-site / unstated
First seen by hirly: 28 Sept 2026

Derived automatically from the posting. Upload your resume above to see how the role scores against it.

the posting

About Kernel

Kernel is crazy fast, open source browser infrastructure for AI agents. We handle autoscaling, observability, and the messy details of web interaction, so developers can focus on what their agents do instead of how they do it.

Teams at Cash App, Framer, and 7000+ others use Kernel for deep research, QA automation, and real-time web analysis. We've raised $22M from Accel, YC, and Vercel.

If you're interested in building critical infrastructure for agents on the web, we'd love to chat.

About the role

We’re hiring a Browser Security Engineer to harden and extend our Chromium-based browser runtime. You’ll work at the intersection of sandboxing, networking, and virtualization — ensuring our browsers run securely and efficiently across thousands of concurrent users.

What you’ll do

Debug, patch, and optimize Chromium builds running inside Kernel’s microVM environments.

Implement and maintain network isolation, proxy routing, and IP handling for browsers.

Collaborate with infra engineers on unikernel-based isolation, process scheduling, and kernel security policies.

Build internal tooling for binary analysis, crash triage, and vulnerability monitoring.

Support the team in maintaining secure supply chain and reproducible builds for our browser images.

What we’re looking for

Deep familiarity with Chromium internals, browser sandboxes, or renderer/network stacks.

Experience with Linux kernel, microVMs (Firecracker, Cloud-Hypervisor, Kata, gVisor, etc.), or container isolation.

Strong debugging skills with strace, gdb, perf, or similar low-level tools.

Knowledge of networking fundamentals (DNS, TCP/IP, NAT, proxies, TLS).

Background in security engineering or browser hardening a plus.

What you can expect as a Kernel

Industry-competitive salary

Above market equity

Premium medical + dental coverage + dependent coverage

Small, trusting team of senior + staff engineers

Default async with minimal bureaucracy

Daily lunches on us

Unlimited PTO

401k + company match

Relocation assistance

Hiring process

We have a simple process focused on real world collaboration and jointly getting to know each other:

30 minute intro calls with one of Kernel’s co-founders

45-minute technical interview (virtual)

Half-day on-site (in-person) working with our team on relevant technical challenges.

Offer!

Original posting on Kernel's site ↗

Browse similar roles

Want this one?

Upload your resume and hirly rewrites it for this job and writes the cover letter — in about thirty seconds, before you sign up.

Tailor my resume for this job