Responsibilities
- Build Backend Services and APIs: Implement services and stable interfaces for ingestion, analysis, and reporting workflows.
- Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
- Build Analyst Workflows: Develop complex, data-heavy interfaces that let analysts review results efficiently.
- Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
- Represent Uncertainty: Present confidence, ambiguity, and alternatives clearly rather than reducing complex results to a binary status.
- Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
- Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
- Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
- Maintain Engineering Quality: Add tests, review code, document interfaces, monitor performance, and translate analyst feedback into concrete improvements.
Requirements
- Strong experience with Go or another statically typed backend language
- API design, versioning, validation, and error handling
- Relational data modelling and SQL
- Asynchronous jobs, queues, background processing, and failure recovery
- Testing, profiling, and observability
- Modern JavaScript or TypeScript
- Experience with a modern component-based frontend framework
- Building complex, data-heavy interfaces rather than simple CRUD screens
- Clear presentation of timelines, evidence, relationships, and confidence information
- Service boundaries, event-driven workflows, and integration patterns
- Authentication, authorisation, and tenant isolation
- Containerised applications and production deployment workflows
- Performance and reliability under large data volumes
- JSON APIs and machine-readable exports
- PDF or document-generation pipelines
- English (required)
Nice to Have
- Audit-oriented or evidence-oriented interfaces are a plus
- Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage
- Ability to understand process, host, identity, network, and timeline data
- German (a plus)
Benefits
- Work from anywhere in Germany, and use our Berlin office as often as you like
- 30 days of paid time off, and a quiet inbox while you are away
- Company-paid Deutschlandticket
- Annual budget for the courses and certifications you pick yourself
- Modern tooling and extensive use of AI
- Light process, clear communication, focus on what really matters
Additional Information
- English (required)
- German (a plus)
- This position is a fixed-term contract within a funded development project.
- We are an equal opportunity employer and welcome applications from all backgrounds and genders.
