Software Engineer - Cybersecurity

Role overview

What you will own

• Maintain a production Node.js and Express application, primarily in JavaScript, with TypeScript and React interfaces.
• Diagnose issues across application layers, APIs, authentication, scheduled jobs, data pipelines and MongoDB.
• Maintain cloud, source-control, database, endpoint-security, PKI and observability integrations.
• Improve platform schemas and workflows for assets, scans, evidence, CBOM records, connectors, tenants and findings.
• Support a Go endpoint agent and its Linux and Windows releases, including enrollment, telemetry, updates and rollback.
• Write and maintain unit, integration and browser tests; troubleshoot production issues through verified fixes and documentation.
• Convert customer and pilot requirements into reviewable improvements with the founders.

Core technical requirements

• Practical proficiency in JavaScript, TypeScript and Node.js, including APIs, asynchronous programming and production debugging.
• Backend framework experience with secure routing, middleware, authentication, authorization and rate limiting.
• React, HTML, CSS, Vite, responsive interfaces and component-level testing.
• MongoDB modelling, indexes, aggregation, migrations, tenant-scoped queries, performance analysis and safe changes.
• Git and GitHub workflows, automated testing, Linux administration and basic Windows/PowerShell familiarity.
• Cloud operations in at least one of AWS, Azure, Google Cloud or DigitalOcean; multiple providers are preferred.
• Knowledge of containers, secrets, logs, networking, DNS, TLS, health checks and controlled releases.
• Ability to navigate a mixed JavaScript, TypeScript, Go, Python, Bash and PowerShell codebase.

AI-assisted engineering

• Comfort with OpenAI Codex and similar cloud-based coding agents is required; prompting alone is not sufficient.
• Provide tools with precise context and acceptance criteria, inspect repository instructions and review generated code and diffs.
• Protect credentials, preserve unrelated work, run suitable tests and validate deployments; verify claims against code, logs or controlled tests.
• Google Cloud Code, cloud CLI or remote-development experience is useful.

Cybersecurity and infrastructure

• Interest in cybersecurity and willingness to learn post-quantum cryptography are expected; cryptographer experience is not required.
• Valuable familiarity includes TLS, certificates, PKI, KMS, HSMs, cryptographic algorithms, security scanning and SBOM/CBOM concepts.
• Enterprise identity, least privilege, tenant isolation, audit logging and secure credential handling are relevant areas.
• Enterprise software, banking technology, cloud security, security operations, PKI or infrastructure experience is strongly preferred.
• Experience with Microsoft Defender, CrowdStrike Falcon, Qualys, Palo Alto Cortex, Splunk, ServiceNow or comparable platforms is relevant.

Endpoint and release engineering

Preferred background and work style

• Approximately 2–5 years in software, platform engineering, DevOps, cloud or cybersecurity is preferred; candidates outside that range may apply.
• A relevant degree or equivalent practical experience; evidence of maintaining an application, service, integration or customer deployment.
• Multi-tenant SaaS, regulated-industry experience and clear written English for technical documentation and customer communication are preferred.
• Candidates should be curious, reliable and methodical, able to take ownership remotely, work independently and raise risks promptly.
• Candidates should communicate honestly about implementation status, testing and outstanding work.

Workplace

• Fully remote work from India.

Opportunity

• Work directly with founders on a live cybersecurity platform and gain exposure to post-quantum cryptography, CBOM, cloud security, endpoint engineering and enterprise integrations.
• The role spans product engineering, infrastructure, security and customer pilots, with learning opportunities as post-quantum security evolves.