Full Stack Engineer, Security Analytics

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the company platform.

As a Full Stack Engineer at the company, you will take a leading role in developing a new security analytics capability within our platform. You will build the user interface and the application layer that connects the underlying components into a reliable workflow for security analysts.

This is a fixed-term position running until 31 October 2027.

Tasks

• Build Backend Services and APIs: Implement services and stable interfaces for ingestion, analysis, and reporting workflows.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Build Analyst Workflows: Develop complex, data-heavy interfaces that let analysts review results efficiently.
• Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
• Represent Uncertainty: Present confidence, ambiguity, and alternatives clearly rather than reducing complex results to a binary status.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, monitor performance, and translate analyst feedback into concrete improvements.

Requirements

You do not need to meet every requirement to apply. We are looking for strong product and systems engineering judgement, not a checklist match.Backend EngineeringStrong experience with Go or another statically typed backend languageAPI design, versioning, validation, and error handlingRelational data modelling and SQLAsynchronous jobs, queues, background processing, and failure recoveryTesting, profiling, and observabilityFrontend EngineeringModern JavaScript or TypeScriptExperience with a modern component-based frontend frameworkBuilding complex, data-heavy interfaces rather than simple CRUD screensClear presentation of timelines, evidence, relationships, and confidence informationSystem DesignService boundaries, event-driven workflows, and integration patternsAuthentication, authorisation, and tenant isolationContainerised applications and production deployment workflowsPerformance and reliability under large data volumesReporting and Data PresentationJSON APIs and machine-readable exportsPDF or document-generation pipelinesAudit-oriented or evidence-oriented interfaces are a plusCybersecurity KnowledgeExperience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantageAbility to understand process, host, identity, network, and timeline dataLanguagesEnglish (required)German (a plus)

Benefits

• Work from anywhere in Germany, and use our Berlin office as often as you like
• 30 days of paid time off, and a quiet inbox while you are away
• Company-paid Deutschlandticket
• Annual budget for the courses and certifications you pick yourself
• Modern tooling and extensive use of AI
• Light process, clear communication, focus on what really matters

What follows is short and transparent, a few conversations with the team and then your first week in Berlin. This position is a fixed-term contract within a funded development project. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.