Software Engineer — IDE Security Platform (TypeScript/Node.js) — Equity Only

Company Description

IDEshield is a security platform designed to protect the developer workspace. By integrating enterprise-grade controls directly into the IDE, IDEshield mitigates risks associated with IDE extensions, such as obfuscated code and data exfiltration. Our engine combines static, dynamic, and behavioral analysis to quickly identify real risks, providing actionable findings to developers. IDEshield ensures security without compromising development speed, offering centralized policy management, SSO integration, and audit logging for enterprise use.

Role Description

Part‑time, remote role to build core IDEshield capabilities in TypeScript/Node.js. Scope includes backend services, VS Code extension integrations, scanning engines (static/dynamic/behavioral), runtime monitoring, and policy enforcement. Collaborate across product/security to ship resilient features, own quality, and iterate quickly in an early‑stage environment.

Key Responsibilities

- Design and implement TypeScript/Node.js services, APIs, and workflows.

- Build analyzers: static, dynamic, dependency, and behavior monitoring.

- Implement runtime controls: network/file/process watchers and policy engine.

- Ship exporters/integrations: CEF, LEEF, JSON, SARIF, webhooks; SSO/RBAC.

- Maintain performance budgets; optimize scanning and caching.

- Add tests (unit/integration), CI workflows, and developer docs.

- Uphold security best practices, least‑privilege, and sandboxing patterns.

Qualifications

- Strong CS fundamentals; OOP, data structures, concurrency basics.

- Proficiency in TypeScript and Node.js; production backend experience.

- Experience with software security concepts or secure SDLC.

- Solid debugging, testing, and performance optimization skills.

- Comfortable operating autonomously in a remote, async setup.

Nice to Have

- VS Code extension/Electron experience; AST/CFG parsing or linters.

- Network/file system monitoring, sandboxing, or EDR concepts.

- SIEM/SOAR, auth/SSO (OIDC/SAML), policy engines, RBAC.

- Supply‑chain security, dependency analysis, or ML‑assisted detection.

- Cloud services (AWS/GCP/Azure), containers, and CI/CD.

Compensation

- Equity only; no base salary or cash compensation.

- Meaningful early‑stage ownership with standard vesting and cliff.

- Role structured for founding‑team impact and commensurate equity.

Workplace & Security

- Remote‑first with core hours overlap by team.

- Documentation‑first culture; focused meetings; rapid iteration.