Senior Software Engineer, Investigations

SpyCloud; Austin (TX); On-site; USD 131,000 - 170,000; Full time

Benefits offered by this job

401(k) with Employer Contribution

Health, Vision, and Dental Insurance

Employer Paid Life, Short-term, and/Or

Job summary

SpyCloud in Austin, TX is seeking a Senior Software Engineer to join the Investigations team, building a Go API, a React front end, and a Python agent to pivot from a lead identifier to related records. You’ll own the module end-to-end.

You’ll ship production features, mentor engineers, and define guardrails for agent output, with a focus on reliability, performance, and cost, while collaborating with product and design.

Qualifications

• 5+ years delivering production software with multiple stakeholders.
• Proficiency in Go or TypeScript and ability to learn the other quickly.
• RESTful APIs design and maintenance.
• Fluent with PostgreSQL and large analytical datasets.
• Experience with AWS Lambda, API Gateway, ECS, and EC2.

Responsibilities

• Develop features from ambiguous business intent to shipped services.
• Own production outcomes for Investigations: reliability, performance, cost.
• Troubleshoot customer-reported issues and query-plan changes.
• Define and defend design decisions for the module and guardrails.
• Mentor engineers and improve testing, observability, and interfaces.
• Collaborate with product and design and contribute to AI tooling.

Skills

Go

TypeScript

RESTful APIs

PostgreSQL

AWS

Tools

React

Vite

TypeScript

Python

AWS Bedrock

LangGraph

Gin

Docker

Terraform

Job description

Senior Software Engineer, Investigations

Austin, Texas

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. SpyCloud’s solutions thwart cyberattacks and protect more than 4 billion accounts worldwide. Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work. If you’re driven to align your career with a fantastic mission, look no further!

We're looking for a Senior Software Engineer to join the team behind Investigations, the part of the SpyCloud Console that analysts use to run down a lead. They start with a single identifier, usually an email address or a username, and we resolve it into the other personas behind it and the breach and malware records those personas appear in. The corpus is billions of recaptured records, and analysts expect an answer in seconds.

You’ll work across the whole module: a Go API, a React front end built around an entity-relationship graph, and a Python agent that does the pivoting when an analyst asks a question in plain language. You’ll work directly with a product lead and a designer, and the agentic side of the product is new enough that you’ll help decide what it becomes.

Our Stack:

• Front End: React, Vite, TypeScript
• AI: Python, AWS Bedrock, LangGraph
• Frameworks: Vite, MaterialUI, Gin
• Infrastructure: AWS, Docker, Terraform

What You’ll Do:

• Feature Development:
• Take work from ambiguous business intent through to a shipped, operated service, directing AI agents through planning, implementation, and test generation, and staying accountable for the result.
• Own production outcomes for Investigations: reliability, performance, and cost.
• Troubleshoot customer-reported issues, including the ones that turn out to be a query plan change.
• Technical Leadership:
• Make and defend design decisions on a module you will know better than anyone outside the team.
• Set technical direction for Investigations, including the specs, context, and guardrails that decide whether agent-generated work is any good.
• Own verification when generation is cheap. A plan, its implementation, and its tests can all be drafted in an afternoon, so the review gates that keep customer data trustworthy are a design problem, and yours to solve.
• Raise the bar on testing, observability, and the interfaces between our module and the Console platform it deploys into.
• Team Collaboration and Improvement:
• Adopt existing team practices and recommend improvements as needed.
• Mentor engineers on the team, including how to work with agents effectively, and help build a culture of continuous learning.
• Improve how the team builds, including the AI tooling and evaluation harnesses we use to move faster without shipping regressions.

Requirements:

• Professional Experience:
• At least 5 years delivering production software, including work other teams depended on, and the judgment to know a design is wrong before it's expensive.
• Technical Proficiency:
• Depth in Go or TypeScript, and quick to pick up the other.
• Designs, versions, and evolves RESTful APIs other teams depend on.
• Fluent with PostgreSQL and with large analytical datasets
• Strong fundamentals in data structures, algorithms, and system design.
• Production experience with AWS Lambda, API Gateway, ECS, and EC2.
• Communication:
• Sharp writing. Specs and design docs are the primary artifact, for humans and agents both.
• Full lifecycle fluency: code review, source control, build and deploy. We use GitHub, GitHub Actions, and AWS CodeBuild.
• Owns testing, CI/CD, observability, and on-call for what you ship.
• How You Work:
• Ships production code with agentic tools, and can say where they failed and what changed.
• Decomposes ambiguous problems into work an agent can execute. The spec sets the ceiling.
• Reads unfamiliar code fast and catches the plausible-but-wrong. Treats AI output as a draft, not an answer.
• Digs into unfamiliar parts of a system rather than routing around them.
• Learns deliberately, and can point to something picked up recently.

Nice to Have

• Built an internal tool or agent workflow that other engineers adopted.
• Built evals, golden datasets, or regression checks for LLM output, whether a product feature or code generation.
• Adopted an AI-native delivery method such as spec-driven development or AWS's AI-DLC, including the agent rules that make it repeatable.
• Large-scale data processing with Spark or Databricks.
• Python for agent work, such as LangGraph or Bedrock.
• Background in cybersecurity or identity threat protection.

Base Salary Range: $131,000 – $170,000

The salary range reflects the expected base compensation for a fully qualified candidate at this level based on experience, qualifications, and market data at the time of posting.

U.S.-Based Benefits + Perks (for Full Time Employees):

At SpyCloud, we are committed to working alongside individuals who are equally passionate about preventing cybercrime, regardless of their department or role. Guided by our core values in all business decisions, we prioritize unity in our mission and ensure all SpyCloud employees have the support and benefits they need to stay focused on our goals. In addition to our engaging workspace in South Austin, flexible and remote-friendly work options, and competitive salary package, we offer our employees a comprehensive benefits package that includes:

• 401(k) with Employer Contribution
• Health, Vision, and Dental Insurance
• Employer Paid Life, Short-term, and Long-term Disability Insurance
• Generous PTO Plan and 16 paid holidays per year

Health Savings Account (HSA) available with Employer Contribution

U.K.-Based Benefits + Perks (for Full Time Employees):

• Retirement Savings Plan with Employer Contribution
• Employer Provided Private Health Insurance and Healthcare Cashplan
• Employer Paid Life Insurance, Income Replacement, and Critical Illness Protection
• Employee Assistance Program
• 25 days annual accrued holiday plus 8 paid bank holidays and a paid company shutdown during winter holidays

About SpyCloud:

SpyCloud transforms recaptured darknet data to disrupt cybercrime. Its automated identity threat protection solutions use advanced analytics and AI to accelerate investigations and protect workforce, consumer, and supplier identities from the threats that matter most: authentication bypass, session hijacking, malicious insiders, account takeover, ransomware, and fraud. Its data from malware-infected devices, successful phishes, combolists, and third-party breaches also powers many popular dark web monitoring and identity theft protection offerings. Customers include 7 of the Fortune 10, along with hundreds of global enterprises, mid-sized companies, and government agencies worldwide. Headquartered in Austin, TX, SpyCloud is home to more than 250 cybersecurity experts whose mission is to protect businesses and consumers from the stolen identity data criminals are using to target them now.

To learn more and see insights on your company's exposed data, visit spycloud.com .

Our Mission:

Our mission is to make the internet a safer place by disrupting the criminal underground. Together with our customers and partners, we aim to end criminals’ ability to profit from stolen information.

Who We Are:

SpyCloud is a place for innovative, collaborative, and problem-solvers to thrive. Individually, we’re amazing, but together, we’re unstoppable. We celebrate diversity and various perspectives and aim to create an inclusive and supportive environment for all. We are proud to be an Equal Employment Opportunity and Affinitive Action employer of choice. All aspects of employment decisions will be based on merit, performance, and business needs. We do not discriminate on the basis of any status protected under federal, state, or local law. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Women, minorities, individuals with disabilities, and protected veterans are encouraged to apply. SpyCloud complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

SpyCloud expressly prohibits any form of workplace harassment. Improper interference with the ability of SpyCloud's employees to perform their job duties may result in discipline up to and including discharge. SpyCloud shares the right to work and participates in the E-Verify program in all locations.

If you need assistance or accommodation due to a disability, you may contact us.

Our Culture:

Our culture is something really special. We’re all driven to disrupt the cybercriminal economy as we keep customer accounts safe from compromise. We support a truly worthy and serious mission, but we have fun doing it together. If you are driven, inventive, and collaborative, you’ll fit right in.

We will never ask an applicant for sensitive or personal financial information during the recruitment process. We advise all applicants seeking employment with SpyCloud to review available information on recruitment fraud. Anyone who suspects that they have been contacted by someone falsely representing SpyCloud should email [e-mail] .

Compensation Transparency Policy:

At SpyCloud, we believe in transparency and fairness in compensation. We strive to ensure that all employees are fairly compensated for their contributions, and we openly discuss all of such compensation matters. We are committed to providing competitive salaries and benefits packages to attract and retain top talent, and we encourage open dialogue and feedback regarding compensation matters.

SpyCloud is not sponsoring visas at this time.

For applicants residing in California, please click here to read SpyCloud's CCPA Notice.

For applicants residing in the UK, please click here to read SpyCloud's Employee Privacy Notice.