Staff Software Engineer – Detection Platform, GoLang

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the modernization of the detection engine and pipeline to align with the complete Sigma v2 specification, including stateful correlation of events over time.

• Revamp existing detection pipelines and create new ones on a unified platform.

• Take ownership of validation to ensure that reworked pipelines function as intended, mirroring the systems they replace.

• Establish reliability guarantees encompassing end-to-end latency measurement, liveness coverage, and alerts for any expected work that is missing.

• Develop strategies to manage detection-volume spikes, ensuring they remain within bounds and recoverable.

• Promote consistent internal event-schema and data-contract standards.

• Create validation and drift-detection tools to recognize upstream changes before they disrupt detections.

• Lead significant workstreams and define the technical direction for other engineering teams.

• Write and review production code on a weekly basis.

• Report directly to the Engineering Manager.

⛳️ Requirements

• Extensive experience in designing, building, and managing production distributed systems at scale, primarily using Go, with the ability to work across various layers of the technology stack.

• Proven experience in replacing or significantly re-architecting a live, high-throughput system without disrupting its consumers, including demonstrating equivalence, staging cut-over, and safely decommissioning the old path.

• Experience with high-volume event or data pipelines and a thorough understanding of their behavior under load.

• Strong instincts for operability, including the design of observability and alerting systems for the absence of expected work.

• Demonstrated technical leadership across team boundaries without formal authority.

• Sound judgment regarding production quality and release readiness.

• Practical experience with AI coding tools and an informed perspective on their correct usage for security outcomes.

• Strongly preferred: a background in security operations or security engineering.

• Strongly preferred: experience with detection-as-code or rule- and DSL-driven systems.

• Strongly preferred: experience in developing platform tools for non-engineer authors.

• Ruby on Rails experience is a bonus, though not mandatory.

• Primary expertise in Go; proficiency in Go will be directly assessed during interviews.

🏝️ Benefits

• Fully remote working environment.

• Generous paid time off policy, covering vacation, sick leave, and paid holidays.

• 12 weeks of paid parental leave.

• Highly competitive and comprehensive medical, dental, and vision benefits packages.

• 401(k) plan with a 5% contribution from the company, regardless of employee contribution.

• Life and disability insurance plans.

• Stock options available for all full-time employees.

• One-time $500 reimbursement for home office setup or upgrades.

• Annual budget for education and professional development support.

• $75 USD/month digital reimbursement.

• Access to the BetterUp platform for personal coaching and professional growth.