Software Engineer - Full Stack

GhostEye; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

GhostEye is building an automated social engineering platform to test employee defenses and protect organizations. You will own customer-facing features across our TypeScript frontend and backend APIs, with a stack that includes Rust and AWS.

Your role covers implementation, testing, deployment, and running in production. You will collaborate with customers and teammates to understand requirements, make technical decisions, and resolve problems in the software you own, delivering reliable,

Qualifications

• Experience building and maintaining production TypeScript applications (frontend and backend).
• Solid understanding of authentication, authorization, browser behavior, and asynchronous requests.
• Methodical debugging across browser, network, services, and data.
• Tests that cover meaningful failure cases and verify customer-visible behavior.
• Good judgment about usability, implementation scope, and maintainability.

Responsibilities

• Own customer-facing features across the TypeScript frontend and backend APIs.
• Define implementation, testing, deployment, and operation in production.
• Collaborate with customers and teammates to capture requirements and resolve problems in the software you own.
• Build and extend APIs and data models for conversations, permissions, and campaign results.

Job description

Why GhostEye

GhostEye is building an automated social engineer that tests how attackers could deceive employees and gain access to company systems. Our customers include government organizations and Fortune 100 companies.

We operate our own fine-tuned model, voice synthesis, and self-hosted phone infrastructure. We are extending the platform into post-click compromise and downstream access testing, helping security teams establish what access an attack enables, which defenses intervene, and whether a fix holds when tested again.

Our founder previously led BlackRock’s red team and worked in offensive cyber operations at MITRE. The product draws on that experience, with engineering problems spanning real-time communication, controlled execution, and reliable evidence collection.

The role

You will own customer-facing features across our TypeScript frontend and backend APIs, working within a broader stack that includes Rust and AWS. Your responsibility will extend from defining the implementation through testing, deployment, and operation in production.

You will work with customers and teammates to understand requirements, make technical decisions, and resolve problems in the software you own.

What you will work on

• Campaign configuration, targeting, scheduling, and approval workflows.
• Streaming views of calls and messages, with clear execution status and error reporting.
• Investigation interfaces that distinguish successful, blocked, and untested attack steps and show the supporting evidence.
• APIs and data models for conversations, permissions, and campaign results.
• Customer controls and reporting for post-click compromise tests and downstream access checks.

Your first 90 days

First 30 days: Understand the product and ship your first workflow

Learn how the existing interfaces, APIs, and services fit together. Work with the product team to identify a customer workflow we can complete using what we have already built. Ship that flow and document the remaining gaps and dependencies.

By 60 days: Build new flows across the stack

Own a new customer journey across the frontend, APIs, and supporting services. This could include configuring a scenario, selecting a voice, scheduling a campaign, and reviewing its progress. Work with product to define the behavior, handle permissions and failure states, and verify the complete experience before release.

By 90 days: Take responsibility for delivery

Carry a larger product initiative from requirements through production. Help the product team understand what is ready, what remains unfinished, and which technical decisions are blocking progress. Break the work into releases, resolve integration issues, and follow up on customer feedback and production problems.

What we are looking for

• Experience building and maintaining production TypeScript applications, including frontend interfaces and backend APIs.
• A solid understanding of authentication, authorization, browser behavior, and asynchronous requests.
• A methodical approach to debugging across the browser, network, services, and data.
• Tests that cover meaningful failure cases and verify the behavior customers depend on.
• Good judgment about usability, implementation scope, and maintainability.

Experience with Rust, AWS, streaming applications, or security tools is valuable.

Communication matters

We expect clear design notes, direct explanations of technical tradeoffs, and useful documentation. Ask questions when requirements are incomplete, flag risks early, and keep teammates informed about progress and blockers.

When something fails, explain the impact, what you know, what remains uncertain, and how you will verify the fix. You should also be comfortable explaining product behavior to customers without assuming they share your technical background.