About the role
neo is looking for Senior Full-Stack Engineer - Browser Extension.
About the Role
We're looking for a Senior Full-Stack Engineer to join our engineering team.
You'll work on our Chrome extension, a core part of our security platform that runs on managed endpoints across the enterprise and operates in the browser in real time.
You'll own Neo's policy enforcement engine in the browser, the layer that turns security policies into real-time decisions on every page users visit.
Additionally, you'll also build features across our backend services and web app.
What You'll Do
- Architect, build, and maintain our Chrome extension
- Own features from design through production monitoring.
- Debug hard problems across the browser, the OS, and the backend.
- Help shape the product's technical direction and raise the bar on code quality, testing, and release practices.
- Build in-browser security capabilities: DOM inspection and manipulation, user-facing warning and blocking flows, and event capture.
- Keep the extension fast and invisible. Minimize page-load impact, memory footprint, and CPU usage on every site.
- Drive support for other Chromium browsers (Edge, Brave) and, over time, Firefox and Safari WebExtensions.
- Manage Chrome extension publishing, versioning, and staged rollouts.
- Build and extend the APIs and services that power the extension, including configuration delivery, real-time updates.
- Build features in our React/TypeScript web app that let customers configure the product, review events, and manage deployments.
Tech You'll Work With
- Extension: TypeScript, Chrome Extensions APIs (Manifest V3, service workers, content scripts, native messaging)
- Frontend: React, Next.js
- Backend: [Node.js/TypeScript, Go, or similar], Postgres, EventBridge, SQS, S3, AWS Lambda, Pulumi
- Infrastructure: AWS
What You'll Bring
- 5+ years of professional software development experience in a relevant role
- Expert TypeScript/JavaScript and deep knowledge of browser fundamentals: DOM, event loop, cookies, storage, origins, CSP, and the extension security model.
- Production experience with Manifest V3, including service workers, content scripts, and extension messaging.
- Strong React experience.
- Backend experience building and operating APIs and services.
- Strong debugging skills with Chrome DevTools, extension internals, and network tooling.
- A security mindset. You think about how a malicious page or a curious user could break what you build.
Bonus
- Experience building security products: DLP, SSE/SWG, enterprise browser.
- Familiarity with Chromium internals or browser source code.
- Cross-browser extension development (Firefox, Safari).