Full Stack Engineer, Security Analytics

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As a Full Stack Engineer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build the user interface and the application layer that connects the underlying components into a reliable workflow for security analysts.

What You'll Do

• Build Backend Services and APIs: Implement services and stable interfaces for ingestion, analysis, and reporting workflows.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Build Analyst Workflows: Develop complex, data-heavy interfaces that let analysts review results efficiently.
• Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
• Represent Uncertainty: Present confidence, ambiguity, and alternatives clearly rather than reducing complex results to a binary status.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, monitor performance, and translate analyst feedback into concrete improvements.

Skills

You do not need to meet every requirement to apply. We are looking for strong product and systems engineering judgement, not a checklist match.

• Strong experience with Go or another statically typed backend language
• API design, versioning, validation, and error handling
• Relational data modelling and SQL
• Asynchronous jobs, queues, background processing, and failure recovery
• Testing, profiling, and observability
• Frontend Engineering
  • Modern JavaScript or TypeScript
  • Experience with a modern component-based frontend framework
  • Building complex, data-heavy interfaces rather than simple CRUD screens
  • Clear presentation of timelines, evidence, relationships, and confidence information
• System Design
  • Service boundaries, event-driven workflows, and integration patterns
  • Authentication, authorisation, and tenant isolation
  • Containerised applications and production deployment workflows
  • Performance and reliability under large data volumes
• Reporting and Data Presentation
  • JSON APIs and machine-readable exports
  • PDF or document-generation pipelines
  • Audit-oriented or evidence-oriented interfaces are a plus
• Cybersecurity Knowledge
  • Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage
  • Ability to understand process, host, identity, network, and timeline data
• Languages
  • English (required)
  • German (a plus)

Other Requirements

• Existing legal right to work in Germany and primary residence in Germany
• Clean criminal record certificate
• Willingness to travel to the Berlin office approximately once per month