Senior Backend Engineer (Precision Defense)
Posted Updated
- As a Senior Backend Engineer on the Precision Defense team, you’ll help build the systems that move our customers from reactive security toward proactive, evidence-based defense
- The team operates across three closely related areas — Rapid Response, Tripwires/Deception, Security Controls/EDR, and Autonomous Defense — and you’ll contribute to backend infrastructure that spans all of them
- Depending on where you land within the team, your focus might include: analyzing and surfacing emerging vulnerability intelligence; building and scaling the workflows that help customers identify exposed assets and validate their defenses; deploying and improving deception signals that catch attackers in the act; or producing credible evidence that endpoint detection and response (EDR) controls are working as expected. Across all of these, the common thread is translating attacker-informed findings into measurable defensive outcomes for our customers
- This is a high-impact role on a team that owns customer-facing security workflows, supports production incidents, and ships features that directly influence how organizations understand and close their defensive gaps
- Build and maintain backend APIs, ETL pipelines, and data processing systems that power Rapid Response, Tripwires, EDR effectiveness, and Autonomous Defense workflows
- Design and implement GraphQL APIs to facilitate data interactions across product components
- Develop event-driven services and distributed systems that support reliable, scalable security automation
- Collaborate with frontend engineers, attack engineers, and product managers to deliver customer-facing features that communicate security findings clearly and actionably
- Contribute to production reliability: monitoring, alerting, incident response, and debugging across ETL, deployment, and data-propagation workflows
- Support safe, explainable, and reversible security automation — understanding that incorrect behavior in this domain can mean missed detections, noisy alerts, or false confidence for customers
Benefits
- Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
- Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
- Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
- Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
- Strong technical documentation ability to support the development process
- Bachelor’s Degree in Computer Science, Computer Engineering, or related field
- 7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)
- Ability and interest in mentoring junior and mid-level engineers to foster their growth and development
- Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes
- A strong desire to continuously improve and learn new technologies in a fast-paced Agile development environment
- Driven, self-managed, capable of conceiving and implementing solutions on your own and with a team
- Expert proficiency in SQL
- Required Education / Experience:
- Excellent analytical and problem-solving skills, effective communication, attention to detail, and high-quality work
- Effective communication and collaboration with designers, developers, and product managers
- Ability to own and manage concurrent initiatives, demonstrating effective judgment in prioritization and time management
- Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows
- Familiarity with major EDR platforms (CrowdStrike, SentinelOne, Microsoft Defender) at the telemetry or API level
- Understands detection logic, alert triage workflows, and how security teams consume and act on findings
- Expert proficiency in SQL and experience with relational (PostgreSQL) and graph (Neo4j) database architectures
- Comfort translating attack behavior into measurable defensive outcomes
- Background in event-driven systems, distributed services, observability, and production reliability
- Experience building GraphQL backends