Sr C++ Network Security Engineer - Only W2 - Remote (US)

Role: Sr C++ Network Security Engineer Remote (US) Job Type: W2 Contract Key skills: C++, Network programming in C++, strong coding Scope

• Remediate security vulnerabilities in open-source Envoy Proxy (C++) from a Client-triaged Buganizer backlog
• Submit patches to Envoy's private security repo (envoy-setec); reviewed by Envoy maintainers
• Back-port fixes to supported Envoy release branches
• Integrate approved fixes into Google3 via designated patching process (Google FTE review; no AI tooling on Google3)
• Guard all behavior-affecting fixes behind Envoy runtime flags; escalate complex cases to Cleint tech leads

Required

• Strong production C++
• Network programming in C++: sockets, TCP/UDP, TLS termination, HTTP protocol handling (parsing, framing, connection lifecycle)
• Asynchronous, event-driven server architectures (epoll/libevent-style event loops, non-blocking I/O)
• Analyzing and fixing security vulnerabilities
• LLM/AI-agent-assisted vulnerability fix generation
• GitHub: PRs, upstream OSS contribution, code review

Preferred

• Envoy internals or proxy/networking code (HTTP/1.1, HTTP/2, HTTP/3, TLS)
• Large monorepo experience