Staff Software Engineer - Detection Platform

Responsibilities

• Lead modernization of detection engines and high-volume event pipelines, including support for the Sigma v2 specification and stateful event correlation.
• Rework existing detection pipelines and build new ones on a common platform, replacing bespoke per-product detectors.
• Define validation approaches to prove replacement pipelines behave equivalently before staged cutovers and retirement of legacy paths.
• Improve reliability under load through end-to-end latency measurement, liveness coverage, absence-of-work alerting, and bounded recovery mechanisms.
• Establish coherent event schemas and data contracts across engineering teams.
• Build validation and drift-detection tooling to identify upstream schema changes before they disrupt detections.
• Lead major cross-team technical workstreams, set direction, and write and review production code.

Requirements

• Deep experience designing, building, and operating distributed production systems at scale, primarily in Go.
• Experience working across multiple layers of the stack.
• Experience replacing or substantially re-architecting live, high-throughput systems without breaking consumers.
• Experience with high-volume event or data pipelines and their behavior under load.
• Strong observability and operability practices, including alerting for missing expected work.
• Demonstrated technical leadership across team boundaries without relying on positional authority.
• Strong judgment regarding production quality and release readiness.
• Hands-on experience with AI coding tools and a security-focused approach to correctness.

Nice-to-haves

• Security operations or security engineering experience, including writing or tuning detections or working in a SOC.
• Experience with detection-as-code or rule- and DSL-driven systems, including parsing and evaluation.
• Experience building platform tooling for rule writers, analysts, and researchers.
• Ruby on Rails experience.

Technology

• Go, Kafka, Temporal, Redis, ClickHouse, Elasticsearch, Kubernetes, AWS, Azure, Ruby on Rails, Sigma.

Compensation and Benefits

• Base compensation: $200,000–$220,000, plus bonus and equity.
• 100% remote work environment.
• Paid time off, including vacation, sick time, and holidays.
• 12 weeks of paid parental leave.
• Medical, dental, and vision benefits.
• 401(k) with a 5% contribution regardless of employee contribution.
• Life and disability insurance.
• Stock options for full-time employees.
• $500 one-time home-office reimbursement.
• Annual education and professional-development allowance.
• $75 USD monthly digital reimbursement.
• BetterUp coaching and professional-growth access.