Senior Software Engineer - OpenCRQ

About Filigran

Founded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive action.

Filigran stands out in the cybersecurity ecosystem through its open-source, AI-powered, and threat-informed approach to Continuous Threat Exposure Management (CTEM). Our eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation, and cyber risk reduction, enabling organizations to better understand their threat landscape and take action.

At the heart of Filigran is our open-source approach. Our vision is to unite defenders into a global community to make security more open, resilient, and collaborative. Our CORE values—Cohesion, Openness, Responsibility, and Equity—shape how we work together, make decisions, and build for the future.

The Role

We are looking for a Senior Software Engineer who is curious about the modeling problem underneath cyber risk and wants to help shape a young product.

You will join OpenCRQ as its fourth engineer and work across the data model, backend, and product surface. Many foundations are still being defined, giving you meaningful influence beyond the features you directly own.

You will shape these decisions with the squad and experienced engineering and product leaders across Filigran. We value constructive disagreement, clear reasoning, and shared outcomes, and we expect everyone to ask for context, challenge assumptions, and learn from one another.

The Problem You Will Work On

OpenCRQ replaces traditional qualitative cyber risk matrices (red/amber/green spreadsheets) with financial estimates and traceable chains of evidence: which threat actors are active, which assets they can reach, which controls have proven effective, and what the remaining exposure could cost.

Every step is computed from live data and must withstand standard scrutiny regarding evidence provenance. OpenCRQ combines threat intelligence from OpenCTI, exposure and control validation from OpenAEV, and agentic workflows through XTM One. As these products become more connected, the squad will define what agents can ask of the risk model, which evidence they can use, and how their answers remain safe and explainable.

Responsibilities

• End-to-end product ownership: Take product problems from early ideation and technical design through implementation, end-to-end testing, and validation with users.
• The quantification engine: Turn threat frequency, control effectiveness, and asset value into probabilistic loss distributions. Build general-purpose quantitative models that evolve as assumptions and available evidence change without losing reproducibility or explainability.
• The correlation layer: Model complex relationships across OpenCRQ, OpenCTI, OpenAEV, and customer systems. Map threat intelligence to assets, vulnerabilities, exposures, and control coverage, adapting OpenCRQ to open standards and schemas such as STIX and OCSF.
• Reliable ingestion at scale: Process hundreds of thousands of findings per tenant through delta syncs, long-running backfills, and feeds with imperfect timestamps. Help design observable, recoverable pipelines while extending tenant isolation.
• The agentic surface: Design the contracts used by XTM One agents and the plain-language explanations behind risk figures.

What Success Looks Like

Within your first 6 to 12 months, you will have:

• Taken a meaningful product problem from early ideation through implementation, testing, and user validation.
• Shaped a core part of OpenCRQ’s interconnected data model or quantification engine and documented the trade-offs behind it.
• Made a major ingestion or calculation path more observable, recoverable, and reproducible.
• Defined or implemented a durable contract between OpenCRQ and another Filigran product or an open standard.
• Helped ship risk results that users can trace back to their underlying evidence.
• Contributed to the open-source release and to engineering practices for the growing squad.

Team Structure & Tech Stack

You will join two senior engineers and a staff engineer, reporting to OpenCRQ’s Engineering Manager. You will collaborate with the VP of Technology, CTO, Principal Engineers, and cross-product teams across OpenCTI, OpenAEV, and XTM One.

Tech Stack:

• Language & Frameworks: TypeScript end-to-end, React, Vite, TanStack Router (frontend); Node.js, Fastify, tRPC (backend).
• Database: PostgreSQL with a code-first schema using Drizzle in a monorepo setup.
• Infrastructure & Tooling: Containerized deployments (SaaS and self-managed), OpenTelemetry (traces, metrics, logs), Prometheus, continuous profiling.

Candidate Profile

• Track record of taking complex product problems from an ambiguous idea to a validated, tested production output.
• Strong experience with modern TypeScript and practical knowledge of PostgreSQL beyond ORM abstractions.
• Ability to reason about complex system relationships and design coherent, evolving data models.
• Comfortable turning quantitative concepts and probability distributions into maintainable software (formal statistics training not required).
• Thoughtful use of AI coding tools, knowing where they accelerate work and where outputs need careful verification.
• Fluent English is required.

Nice-to-Haves

• Experience in cybersecurity, GRC, or risk quantification.
• Familiarity with open standards (STIX/TAXII, OCSF, MITRE ATT&CK).
• Experience shipping features involving LLM agents, RAG, or MCP.

Compensation & Benefits

• Competitive compensation + equity package
• Remote-first work model
• 25 days PTO baseline + paid volunteer days
• Equipment selection budget and remote work support
• Two annual in-person company get-togethers (one global, one team)