Member of Technical Staff: Software Engineering

Asymmetric Security; New York, Northern (NY, KY); Hybrid; USD 140.000 - 210.000; Vollzeit

Zusammenfassung

Asymmetric is an AI-native Digital Forensics and Incident Response company that operates a live multi-tenant platform handling real incidents today. We seek engineers to own and scale the platform end to end, from data collection through investigation-ready data models to analyst-facing tools for incident responders and AI agents.

Ideal candidates write strong backend Python, work with FastAPI, PostgreSQL, SQLAlchemy and Alembic, and are comfortable with large-scale data pipelines, cloud infra

Qualifikationen

• Have built, shipped and operated production software that real users depend on.
• Write strong backend Python: API design, async code, SQL and schema migrations.
• Are comfortable with data-intensive systems: large volumes of semi-structured logs and data movement through pipelines.
• Have run cloud infrastructure in production: AWS, Terraform, containers and serverless/event-driven orchestration.
• Are comfortable with a modern TypeScript frontend or can collaborate with frontend engineers.

Aufgaben

• Design, ship and operate backend services and data pipelines end to end, from the API to the Terraform.
• Own pipeline correctness: idempotent stages, leases and retries, and provenance from every finding back to the raw evidence.
• Build the analyst-facing product with our incident responders: investigation views, timelines, findings and reports.
• Own reliability, performance and observability as volume grows: alarms that mean something, runbooks, and capacity planning.
• Make key architectural decisions and raise the engineering bar: testing, CI/CD, and a codebase that agents and humans can both work in safely.

Kenntnisse

Backend Python

API design

SQL & migrations

Async programming

TypeScript frontend

Cloud infrastructure

Tools

FastAPI

PostgreSQL

SQLAlchemy

Alembic

Terraform

AWS

Docker

ClickHouse

Apache Iceberg

Velociraptor

Jobbeschreibung

Member of Technical Staff: Software Engineering

Asymmetric is the first AI-native Digital Forensics and Incident Response company. Our platform has helped incident responders handle hundreds of cyber attacks. Building on that experience, we create realistic investigation environments and evaluations to train and measure AI on real defensive work, both for our own agents and for our partners’ models.

Our mission is to accelerate AI cyberdefense to address the security challenges of the AGI era.

We believe that automated digital forensics, i.e. deep security investigations, will become ubiquitous in a world with abundant intelligence. Read more about our vision .

About the role

Asymmetric runs a production, multi-tenant platform that collects evidence from customer environments, processes it into a forensic data model, and serves it to human analysts and AI agents working the same case. It is live and handling real incidents today.

We’re hiring engineers to own and scale that platform. The work runs from collection to the pixels on screen, and the bar is forensic: evidence has to be complete, traceable and isolated between tenants, because findings end up in front of lawyers, insurers and regulators. For example, we need to:

• Scale our evidence collectors across Microsoft 365, Google Workspace and endpoints (Windows, macOS, Linux), pulling audit logs, mailboxes and host artefacts from customer tenants reliably and within their API limits.
• Evolve our evidence pipeline, which takes raw evidence, normalises it into a common model of events and entities, and materialises investigation-ready tables on Apache Iceberg.
• Make investigation-scale data fast to explore: serve tens of millions of events per case from ClickHouse with interactive filtering, search and bulk classification.
• Harden the multi-tenant foundation: tenant isolation, authorisation, auditability and least-privilege infrastructure for a security product that holds other people’s breach data.

Illustrative responsibilities

• Design, ship and operate backend services and data pipelines end to end, from the API to the Terraform.
• Own pipeline correctness: idempotent stages, leases and retries, and provenance from every finding back to the raw evidence.
• Build the analyst-facing product with our incident responders: investigation views, timelines, findings and reports.
• Own reliability, performance and observability as volume grows: alarms that mean something, runbooks, and capacity planning.
• Make key architectural decisions and raise the engineering bar: testing, CI/CD, and a codebase that agents and humans can both work in safely.

You may be a fit if you:

• Have built, shipped and operated production software that real users depend on.
• Write strong backend Python: API design, async code, SQL and schema migrations (we use FastAPI, PostgreSQL, SQLAlchemy and Alembic).
• Are comfortable with data-intensive systems: large volumes of semi-structured logs, columnar formats, and how data moves through a pipeline.
• Have run cloud infrastructure in production: AWS, Terraform, containers, and serverless or event-driven orchestration.
• Are comfortable with a modern TypeScript front end (React, Next.js, Tailwind), or happy to work closely with engineers who are.
• Use AI coding agents as a core part of how you build, and care about keeping a codebase legible to them.
• Work closely with users and iterate quickly to deliver working software.
• Are deeply motivated by our mission.

You’re encouraged to apply even if you don’t believe you meet every listed qualification.

Nice to Have

• Lakehouse or analytical-database experience: Apache Iceberg, ClickHouse, DuckDB, Polars, or similar.
• Experience with the Microsoft Graph API, the Google Workspace Admin SDK, or endpoint forensics tooling such as Velociraptor.
• Multi-tenant SaaS with tenant isolation and RBAC, or work in SOC 2 or other regulated environments.
• A background in cybersecurity, incident response or digital forensics.
• Site reliability experience: on-call, incident response, and SLO design.
• Open-source contributions or a track record of shipping side projects.