Job description

Transform raw signals into actionable intelligence. Build the pipelines that turn chaos into clarity. At detections.ai, we believe that great detection starts with great data. We're looking for a data engineer who doesn't just move bytes—but architects the intelligence infrastructure that helps security teams see threats before they strike. This is your chance to build the data foundation that powers the future of threat detection. You’ll Own: • Backend services end-to-end – from first design sketch to production deployment. • High-throughput data pipelines that transform messy security telemetry into clean, enriched streams. • Integrations with SIEMs, EDRs, and security platforms that make our product the connective tissue of the modern security stack. • Cross-team collaboration with frontend, AI, and detection engineers to ensure data becomes truly actionable. • Core architecture and APIs that other engineers (and customers) will build on every day. You’re a Fit If You: • Have 5+ years building and scaling backend systems that handle real-world complexity. • Are fluent in Python (FastAPI preferred) and cloud-native development on AWS or GCP. • Can design data models and transformation logic for complex, real-time workflows. • Build with resilience, security, and performance as first principles. • Thrive in a high-context, low-process environment where speed and ownership matter. You’ll Stand Out If You: • Have hands-on experience with SIEMs, SOARs, detection pipelines, or IR tools. • Have worked with event streaming/orchestration systems (Kafka, Kinesis, Airflow). • Understand security-first architecture (RBAC, audit logs, multi-tenancy). • Have built on OpenSearch or DynamoDB for large-scale, fast data access. Tech Stack: • Frontend: React.js, Tailwind CSS, TypeScript • Middle Layer: Node.js, TypeScript • Backend: Python (FastAPI) • Infra & DevOps: AWS, GCP, Docker, Terraform, GitHub Actions • Data: OpenSearch, DynamoDB • AI Agents: Gemini, Anthropic, OpenAI • Tooling: Figma, Storybook, CI/CD pipelines The Offer: • Remote-first with meaningful equity • Build for real users: Work side-by-side with detection engineers. • Own meaningful problems: Architect the systems that make detections possible. • Move fast without red tape: Small, high-context team with outsized impact. • Shape product and culture: Your work is foundational to the company’s success. This isn't just another data engineering role—it's your chance to build the data foundation that powers the next generation of threat detection.

Requirements

Must-haves

Transform raw signals into actionable intelligence. Build the pipelines that turn chaos into clarity.
Backend services end-to-end – from first design sketch to production deployment.
High-throughput data pipelines that transform messy security telemetry into clean, enriched streams.
Integrations with SIEMs, EDRs, and security platforms that make our product the connective tissue of the modern security stack.
Cross-team collaboration with frontend, AI, and detection engineers to ensure data becomes truly actionable.
Core architecture and APIs that other engineers (and customers) will build on every day.
Have 5+ years building and scaling backend systems that handle real-world complexity.
Can design data models and transformation logic for complex, real-time workflows.
Build with resilience, security, and performance as first principles.
Thrive in a high-context, low-process environment where speed and ownership matter.
Have hands-on experience with SIEMs, SOARs, detection pipelines, or IR tools.
Have worked with event streaming/orchestration systems (Kafka, Kinesis, Airflow).
Understand security-first architecture (RBAC, audit logs, multi-tenancy).
Have built on OpenSearch or DynamoDB for large-scale, fast data access.
Frontend: React.js, Tailwind CSS, TypeScript
Middle Layer: Node.js, TypeScript
Backend: Python (FastAPI)
Infra & DevOps: AWS, GCP, Docker, Terraform, GitHub Actions
Data: OpenSearch, DynamoDB
AI Agents: Gemini, Anthropic, OpenAI
Tooling: Figma, Storybook, CI/CD pipelines
Remote-first with meaningful equity
Build for real users: Work side-by-side with detection engineers.

Nice-to-haves

Are fluent in Python (FastAPI preferred) and cloud-native development on AWS or GCP.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aisketchpythonawsgcpreacttypescriptnode.jsdockerfigmaci/cd

Platform: gem
Effort: medium