Senior Software Engineer - OpenCRQ

The role

You will work as a Senior Software Engineer on the OpenCRQ product. You will work across the data model, backend, and product surface to build a cyber risk quantification engine.

What you will do

• Take product problems from early ideation and technical design through implementation, testing, and validation.
• Build the quantification engine to turn threat frequency, control effectiveness and asset value into probabilistic loss distributions.
• Model complex relationships across OpenCRQ, OpenCTI, OpenAEV and customer systems.
• Adapt OpenCRQ to open standards and schemas such as STIX and OCSF.
• Design observable, recoverable pipelines for reliable ingestion at scale.
• Design the contracts used by XTM One agents and plain-language explanations behind risk figures.

Required qualifications

• Track record of taking complex product problems from an ambiguous idea to a validated outcome.
• Strong experience with a modern TypeScript stack.
• Practical knowledge of PostgreSQL beyond the ORM.
• Ability to reason about complex relationships across systems and design interconnected data models.
• Comfort turning quantitative concepts into maintainable software.
• Willingness to work with probability distributions, orders of magnitude and models whose assumptions evolve over time.
• Thoughtful use of coding agents.
• Fluent English is required.

Nice to have

• Experience in cybersecurity, GRC or risk quantification.
• Familiarity with STIX/TAXII, OCSF, MITRE ATT&CK or other open cybersecurity standards and frameworks.
• Experience shipping features involving LLM agents, RAG or MCP.

Benefits

• Competitive compensation + equity
• Remote-first flexibility
• 25 days PTO baseline
• Volunteer days
• Equipment choice with additional support for remote work and development needs
• Two annual in-person get-togethers

About the company

Founded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams through open-source solutions. They use an open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM).