Full Stack Engineer, Security Analytics

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As a Full Stack Engineer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build the user interface and the application layer that connects the underlying components into a reliable workflow for security analysts.

This is a fixed-term position running until 31 October 2027.

• Build Backend Services and APIs: Implement services and stable interfaces for ingestion, analysis, and reporting workflows.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Build Analyst Workflows: Develop complex, data-heavy interfaces that let analysts review results efficiently.
• Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
• Represent Uncertainty: Present confidence, ambiguity, and alternatives clearly rather than reducing complex results to a binary status.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, monitor performance, and translate analyst feedback into concrete improvements.

• You do not need to meet every requirement to apply. We are looking for strong product and systems engineering judgement, not a checklist match.

• Backend Engineering

• Strong experience with Go or another statically typed backend language
• API design, versioning, validation, and error handling
• Relational data modelling and SQL
• Asynchronous jobs, queues, background processing, and failure recovery

• Testing, profiling, and observability

• Frontend Engineering

• Modern JavaScript or TypeScript
• Experience with a modern component-based frontend framework
• Building complex, data-heavy interfaces rather than simple CRUD screens

• Clear presentation of timelines, evidence, relationships, and confidence information

• System Design

• Service boundaries, event-driven workflows, and integration patterns
• Authentication, authorisation, and tenant isolation
• Containerised applications and production deployment workflows

• Performance and reliability under large data volumes

• Reporting and Data Presentation

• JSON APIs and machine-readable exports
• PDF or document-generation pipelines

• Audit-oriented or evidence-oriented interfaces are a plus

• Cybersecurity Knowledge

• Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage

• Ability to understand process, host, identity, network, and timeline data

• Languages

• English (required)
• German (a plus)

• Work from anywhere in Germany, and use our Berlin office as often as you like
• 30 days of paid time off, and a quiet inbox while you are away
• Company-paid Deutschlandticket
• Annual budget for the courses and certifications you pick yourself
• Modern tooling and extensive use of AI
• Light process, clear communication, focus on what really matters

A close match is enough. If the role speaks to you, apply with your CV and anything else you would like us to see. What follows is short and transparent, a few conversations with the team and then your first week in Berlin. This position is a fixed-term contract within a funded development project. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.