Full Stack Engineer, Security Analytics

We are building a new capability that turns fragmented noisy security logs into explainable AI-powered threat analysis delivered inside the RedMimicry platform.

As a Full Stack Engineer at RedMimicry you will take a leading role in developing a new security analytics capability within our platform. You will build the user interface and the application layer that connects the underlying components into a reliable workflow for security analysts.

This is a fixed-term position running until 31 October 2027.

• Build Backend Services and APIs: Implement services and stable interfaces for ingestion analysis and reporting workflows.
• Design Domain Models: Define maintainable data models for security events analysis results and supporting evidence.
• Build Analyst Workflows: Develop complex data-heavy interfaces that let analysts review results efficiently.
• Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
• Represent Uncertainty: Present confidence ambiguity and alternatives clearly rather than reducing complex results to a binary status.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Handle Long-Running Jobs: Implement asynchronous processing progress reporting retries cancellation and useful failure states.
• Build Secure Multi-Tenant Components: Apply authentication authorisation tenant separation and secure data-handling patterns.
• Maintain Engineering Quality: Add tests review code document interfaces monitor performance and translate analyst feedback into concrete improvements.

• You do not need to meet every requirement to apply. We are looking for strong product and systems engineering judgement not a checklist match.

• Backend Engineering

• Strong experience with Go or another statically typed backend language

• API design versioning validation and error handling

• Relational data modelling and SQL

• Asynchronous jobs queues background processing and failure recovery

• Testing profiling and observability

• Frontend Engineering

• Modern JavaScript or TypeScript

• Experience with a modern component-based frontend framework

• Building complex data-heavy interfaces rather than simple CRUD screens

• Clear presentation of timelines evidence relationships and confidence information

• System Design

• Service boundaries event-driven workflows and integration patterns

• Authentication authorisation and tenant isolation

• Containerised applications and production deployment workflows

• Performance and reliability under large data volumes

• Reporting and Data Presentation

• JSON APIs and machine-readable exports

• PDF or document-generation pipelines

• Audit-oriented or evidence-oriented interfaces are a plus

• Cybersecurity Knowledge

• Experience with SOC tooling SIEM EDR incident response threat hunting or security analytics is a strong advantage

• Ability to understand process host identity network and timeline data

• Languages

• English (required)

• German (a plus)

• Work from anywhere in Germany and use our Berlin office as often as you like
• 30 days of paid time off and a quiet inbox while you are away
• Company-paid Deutschlandticket
• Annual budget for the courses and certifications you pick yourself
• Modern tooling and extensive use of AI
• Light process clear communication focus on what really matters

A close match is enough. If the role speaks to you apply with your CV and anything else you would like us to see. What follows is short and transparent a few conversations with the team and then your first week in Berlin. This position is a fixed-term contract within a funded development project. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.