Senior Software Engineer, Threat Intelligence
Infrawatch · London ·
- Work mode
- Remote
- Seniority
- Senior
- Category
- Security
Infrawatch · London ·
cyberhaven · Bangalore
PrizePicks · Remote
megaport · Australia
chainstack
Compensation: £80k – £120k
Infrawatch is building the infrastructure intelligence layer for the public internet.
Our technology helps some of the world’s most advanced organisations detect cyberattacks, fraud, scams, and online abuse before they become a threat. Customers use Infrawatch to uncover the infrastructure behind malicious activity, identify emerging threats, investigate complex incidents, and make decisions using intelligence that previously did not exist.
Our platform continuously observes, processes, enriches, and serves data about the public internet. Today, we process more than 23.5 billion primary-source events every day across IP addresses, domains, DNS, certificates, exposed services, and internet activity.
The engineering challenge is not simply one of scale. Internet data is constantly changing, frequently incomplete, and sometimes deliberately deceptive. We have to transform that data into intelligence that is accurate, searchable, explainable, and available through fast, reliable products and APIs.
We are a small, highly capable team building technology that competes globally. Engineers at Infrawatch work on systems customers depend on today while helping design the architecture we will need for what comes next.
This is a high-trust, high-accountability environment. Expectations are clear, engineers own what they build, and strong ideas can move quickly from discussion into production. There are no layers of bureaucracy and very little distance between discovering an important problem and shipping the system that solves it.
For the right person, this is an opportunity to join early, take meaningful ownership, and help build the technical foundations of a category-defining company.
We are looking for a Senior Software Engineer with strong Golang experience to help design, build, and operate the systems powering the Infrawatch platform.
This role sits at the intersection of distributed systems, large-scale data engineering, API design, and cybersecurity. You will work across both the data platform that processes tens of billions of events each day and the services through which customers search, investigate, and integrate with that intelligence.
This is not a narrowly defined API position or a traditional data engineering role. You will work across ingestion, streaming, processing, orchestration, storage, indexing, APIs, and customer-facing backend services.
You will make pragmatic decisions about throughput, latency, correctness, reliability, observability, and cost. You will then take ownership of those decisions in production.
The role is deeply hands-on. You will write production Go, investigate difficult failures, improve existing systems, and design new services as the scale and complexity of the platform continue to grow.
Build systems at internet scale
You will design and operate high-performance services responsible for ingesting and processing large volumes of internet infrastructure data. This includes real-time streaming systems, large-scale batch pipelines, transformation and enrichment workflows, deduplication, aggregation, classification, and the safe replay or reprocessing of billions of records.
Create the customer-facing intelligence layer
You will build reliable, low-latency APIs and backend services used by customers, integrations, internal platform components, and investigative workflows. You will help determine how extremely large intelligence datasets should be modelled, indexed, searched, retrieved, and presented through dependable product interfaces.
Improve our distributed data platform
You will work extensively with technologies including Kafka, ClickHouse, Elasticsearch, Redis, and Docker. You will improve partitioning, query performance, storage efficiency, workload isolation, failure recovery, and the movement of data between systems.
You do not need previous experience with every technology we use. What matters is that you understand the engineering principles underneath them and can apply that knowledge to unfamiliar systems.
Operate what you build
Engineers at Infrawatch remain close to production. You will investigate failures across distributed systems, improve observability and operational visibility, design for partial failure, and ensure systems recover safely from retries, duplicates, ordering issues, backpressure, and interrupted processing.
You will be expected to understand not only whether a system works, but how it behaves under load, how it fails, how much it costs, and how quickly it can be restored.
Shape the future of the platform
You will work directly with the founder and the wider engineering team to shape the company’s technical direction. You will help establish the architecture, engineering practices, and operating standards required for the next stage of Infrawatch’s growth.
Important technical problems will not arrive as perfectly defined tickets. You will be trusted to understand the underlying need, evaluate the trade-offs, propose an approach, and carry the work from design through to production.
Our Technology
Our backend and data platform is built primarily in Go and currently makes extensive use of:
Our technology choices will continue to evolve. We care more about strong engineering judgement and an understanding of underlying systems than experience with one exact combination of tools.
The strongest candidates will have substantial experience building and operating production software in Go, particularly systems where performance, reliability, and correctness matter.
You should be comfortable designing backend services and APIs, working with distributed data systems, and reasoning about the behaviour of event-driven architectures in production. You understand that building the happy path is only part of the job and can design for retries, duplicates, ordering, backpressure, reprocessing, partial failures, and changing requirements.
You will likely have experience in several of the following areas:
Just as importantly, you should be able to take ownership of complex and ambiguous problems, communicate your reasoning clearly, and make pragmatic technical decisions without unnecessary ceremony.
We value engineers who care deeply about the quality and maintainability of their work, but who also understand when to simplify, when to iterate, and when a problem requires a more durable solution.
You may be especially well suited to the role if you have experience:
These are advantages rather than strict requirements. We are more interested in what you have built, how you approach difficult engineering problems, and the level of ownership you are ready to take.
Infrawatch is a fast-moving company, but speed does not mean chaos.
We set clear expectations, trust capable people to make decisions, and expect engineers to take responsibility for the systems they own. The work is challenging and the standards are high, but individual contributions are visible and meaningful.
You will work closely with a small team rather than through layers of management. You will have direct access to the people making product and company decisions, and you will be able to influence both.
We want people who enjoy building, who are curious about how the internet really works, and who take pride in solving problems that most engineering teams will never encounter.
You will work on genuinely difficult software and data engineering problems at significant scale.
You will help build systems that process more than 23.5 billion events every day and turn raw internet observations into intelligence used by some of the world’s largest and most technically advanced organisations.
Your work will support customers operating across cybersecurity, artificial intelligence, financial services, fraud prevention, and critical infrastructure.
You will have meaningful ownership across the full technical stack, from raw internet data and distributed processing systems to customer-facing products and APIs.
You will directly influence the architecture, engineering culture, and technical direction of the company without unnecessary processes, internal politics, or layers of approval.
You will receive a competitive salary and meaningful equity in a fast-growing company, with the opportunity to help define and build an entirely new category of infrastructure intelligence.
This is a remote position preferably within the UK or US, with occasional in-person team meetups.
Applicants must already have the right to work in the UK without sponsorship. We are unable to provide visa sponsorship for this role.
£80,000 - £120,000, plus meaningful equity.
Compensation within and above this range will depend on experience, technical depth, and the level of ownership you are able to take.
We keep the process lightweight, technical, transparent and focused on understanding how you think and what you have built.
Initial conversation: 45 to 60 minutes:
A discussion about your experience, the systems you have worked on, what you are looking for, and what we are building at Infrawatch.
Technical interview: approximately 60 minutes:
A practical discussion covering backend systems, APIs, distributed data platforms, architecture, production reliability, and examples from your previous work. We are interested in how you approach engineering decisions rather than rehearsed algorithm questions.
Culture interview: approximately 30 minutes
Final conversation with the Founder: approximately 60 minutes
A discussion about ownership, working within an early-stage company, the direction of Infrawatch, and what we could build together.
We aim to move quickly, communicate clearly, and respect the time of every candidate.
Axel springer · Berlin, BE, de