Software Engineer - Backend - Behavioral Security Products

abnormalsecurity; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first engineering

Job summary

Abnormal Security is seeking a backend-focused software engineer to build and evolve the identity threat protection platform. You will ship production-grade backend systems, design scalable services, and contribute to AI-powered features with a focus on reliability and performance.

You will work on integration of LLM APIs, agent workflows, and modern data stores on AWS, collaborating with product managers and engineers to translate requirements into robust implementations and production-ready

Qualifications

• 3-5 years of industry experience shipping production backend systems.
• Solid backend proficiency in Python and production systems with scaling and reliability mindset.
• Experience with relational databases and AWS services (S3, RDS).
• Familiarity with service-to-service communication (gRPC, Kafka), caching, and containerization (Docker, Kubernetes, Helm).
• Ability to document designs and participate in async, cross-functional collaboration.

Responsibilities

• Design, build, and iterate on scalable backend and ML systems, APIs, frameworks, and internal tools; own well-scoped features.
• Write clean, testable code with attention to edge cases and performance, contributing to design reviews and on-call rotations.
• Help design and build LLM-powered features and agentic workflows for investigation, triage, or remediation within the identity protection platform.
• Integrate LLM APIs and agent frameworks into backend services with focus on reliability, cost, and latency.
• Leverage GenAI tooling to accelerate delivery, collaborating with product managers, designers, and engineers on specs and roadmap.

Skills

Python

Backend systems

Cloud architecture

LLM integration

gRPC/Kafka

Redis/Caching

Docker/Kubernetes

Tools

Docker

Kubernetes

Helm

Kafka

gRPC

Redis

AWS S3/RDS

Job description

Role overview

Build and evolve the backend platform powering an identity threat protection product at a cybersecurity company recognized as a Leader in the 2025 Gartner Magic Quadrant for Email Security Platforms. The role blends hands-on backend systems development with growing ownership of features and production systems, including AI-powered and agentic components that detect account takeover, identity spoofing, data leakage, and other identity-based attacks.

Responsibilities

• Design, build, and iterate on scalable backend and ML systems, APIs, frameworks, and internal tools; take ownership of well-scoped features and components.
• Write clean, testable, and resilient code with attention to edge cases and performance, while contributing to design documents, code and design reviews, and on-call rotations.
• Help design and build LLM-powered features and agentic workflows covering automated investigation, triage, or remediation within the account takeover protection platform.
• Integrate LLM APIs and agent frameworks into backend services with attention to reliability, cost, latency, and evaluation, including prompt design, tool and function-calling integrations, and guardrails.
• Leverage GenAI coding assistants and agents in the development workflow to accelerate delivery and testing, then collaborate with product managers, designers, and engineers to align on specifications, priorities, and roadmap discussions.

Requirements

• 3-5 years of industry experience as a Software Engineer with a track record of shipping production backend systems.
• Solid backend proficiency in Python and experience building and maintaining production systems, grounded in system design fundamentals and reasoning about scaling and reliability tradeoffs.
• Working knowledge of relational databases and modern data storage technologies, plus experience with AWS cloud services such as S3 and RDS and standard deployment practices.
• Familiarity with service-to-service communication (gRPC, Kafka), caching (Redis), and containerization and orchestration (Docker, Kubernetes, Helm).
• Understanding of service health, monitoring, and incident response, with the ability to write technical documentation and contribute to design discussions in an async-first, cross-functional environment.

Nice to have

• Hands-on experience integrating LLM APIs (for example OpenAI or Anthropic) into production applications.
• Exposure to agent frameworks or patterns such as LangChain, LangGraph, tool or function calling, or ReAct-style agents.
• Familiarity with prompt engineering, evaluation, and observability for AI-driven features.

Benefits and work setup

• Remote-first engineering role on the Identity Threat Protection team with a focus on behavioral security.
• Equal opportunity employer that considers candidates without regard to race, color, religion, sex, national origin, disability, protected veteran status, or other characteristics protected by law.