The ad says“Understands detection logic, alert triage workflows, and how security teams consume and act on findings”
The ad says“Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes”
The ad says“Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“Understands detection logic, alert triage workflows, and how security teams consume and act on findings”
The ad says“Background in event-driven systems, distributed services, observability, and production reliability”
The ad says“Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“Background in event-driven systems, distributed services, observability, and production reliability”
The ad says“Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience building GraphQL backends”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes”
The ad says“Expert proficiency in SQL and experience with relational (PostgreSQL) and graph (Neo4j) database architectures”
The ad says“Background in event-driven systems, distributed services, observability, and production reliability”
The ad says“Expert proficiency in SQL and experience with relational (PostgreSQL) and graph (Neo4j) database architectures”
The ad says“Background in event-driven systems, distributed services, observability, and production reliability”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“Expert proficiency in SQL”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
The ad says“7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)”
The ad says“Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows”
As a Senior Backend Engineer on the Precision Defense team, you’ll help build the systems that move our customers from reactive security toward proactive, evidence-based defense
The team operates across three closely related areas — Rapid Response, Tripwires/Deception, Security Controls/EDR, and Autonomous Defense — and you’ll contribute to backend infrastructure that spans all of them
Depending on where you land within the team, your focus might include: analyzing and surfacing emerging vulnerability intelligence; building and scaling the workflows that help customers identify exposed assets and validate their defenses; deploying and improving deception signals that catch attackers in the act; or producing credible evidence that endpoint detection and response (EDR) controls are working as expected. Across all of these, the common thread is translating attacker-informed findings into measurable defensive outcomes for our customers
This is a high-impact role on a team that owns customer-facing security workflows, supports production incidents, and ships features that directly influence how organizations understand and close their defensive gaps
Build and maintain backend APIs, ETL pipelines, and data processing systems that power Rapid Response, Tripwires, EDR effectiveness, and Autonomous Defense workflows
Design and implement GraphQL APIs to facilitate data interactions across product components
Develop event-driven services and distributed systems that support reliable, scalable security automation
Collaborate with frontend engineers, attack engineers, and product managers to deliver customer-facing features that communicate security findings clearly and actionably
Contribute to production reliability: monitoring, alerting, incident response, and debugging across ETL, deployment, and data-propagation workflows
Support safe, explainable, and reversible security automation — understanding that incorrect behavior in this domain can mean missed detections, noisy alerts, or false confidence for customers
Benefits
Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
Preferred experience
Strong technical documentation ability to support the development process
Bachelor’s Degree in Computer Science, Computer Engineering, or related field
7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc.)
Ability and interest in mentoring junior and mid-level engineers to foster their growth and development
Experience building applications on cloud computing platforms such as AWS, Azure, or GCP, using container technologies such as Docker and Kubernetes
A strong desire to continuously improve and learn new technologies in a fast-paced Agile development environment
Driven, self-managed, capable of conceiving and implementing solutions on your own and with a team
Expert proficiency in SQL
Required Education / Experience:
Excellent analytical and problem-solving skills, effective communication, attention to detail, and high-quality work
Effective communication and collaboration with designers, developers, and product managers
Ability to own and manage concurrent initiatives, demonstrating effective judgment in prioritization and time management
Experience in one or more of the following areas: EDR/endpoint telemetry and control validation; detection engineering and SOC/SIEM workflows; threat detection, deception systems, honeypots, or tripwire-style platforms; vulnerability intelligence and rapid response workflows
Familiarity with major EDR platforms (CrowdStrike, SentinelOne, Microsoft Defender) at the telemetry or API level
Understands detection logic, alert triage workflows, and how security teams consume and act on findings
Expert proficiency in SQL and experience with relational (PostgreSQL) and graph (Neo4j) database architectures
Comfort translating attack behavior into measurable defensive outcomes
Background in event-driven systems, distributed services, observability, and production reliability
