Full Stack Engineer, Security Analytics

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As a Full Stack Engineer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build the user interface and the application layer that connects the underlying components into a reliable workflow for security analysts.

This is a fixed-term position running until 31 October 2027.

• Build Backend Services and APIs: Implement services and stable interfaces for ingestion, analysis, and reporting workflows.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Build Analyst Workflows: Develop complex, data-heavy interfaces that let analysts review results efficiently.
• Make Evidence Inspectable: Allow analysts to drill down from a conclusion to the exact source fields and log fragments behind it.
• Represent Uncertainty: Present confidence, ambiguity, and alternatives clearly rather than reducing complex results to a binary status.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, monitor performance, and translate analyst feedback into concrete improvements.

• You do not need to meet every requirement to apply. We are looking for strong product and systems engineering judgement, not a checklist match.

• Backend Engineering

• Strong experience with Go or another statically typed backend language

• API design, versioning, validation, and error handling

• Relational data modelling and SQL

• Asynchronous jobs, queues, background processing, and failure recovery

• Testing, profiling, and observability

• Frontend Engineering

• Modern JavaScript or TypeScript

• Experience with a modern component-based frontend framework

• Building complex, data-heavy interfaces rather than simple CRUD screens

• Clear presentation of timelines, evidence, relationships, and confidence information

• System Design

• Service boundaries, event-driven workflows, and integration patterns

• Authentication, authorisation, and tenant isolation

• Containerised applications and production deployment workflows

• Performance and reliability under large data volumes

• Reporting and Data Presentation

• JSON APIs and machine-readable exports

• PDF or document-generation pipelines

• Audit-oriented or evidence-oriented interfaces are a plus

• Cybersecurity Knowledge

• Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage

• Ability to understand process, host, identity, network, and timeline data

• Languages

• English (required)

• German (a plus)

• Work from anywhere in Germany, and use our Berlin office as often as you like
• 30 days of paid time off, and a quiet inbox while you are away
• Company-paid Deutschlandticket
• Annual budget for the courses and certifications you pick yourself
• Modern tooling and extensive use of AI
• Light process, clear communication, focus on what really matters

A close match is enough. If the role speaks to you, apply with your CV and anything else you would like us to see. What follows is short and transparent, a few conversations with the team and then your first week in Berlin. This position is a fixed-term contract within a funded development project. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.

Find more