Software Engineer II - Full Stack

Overview

Software Engineer II (Full Stack) for the Threat Narrative team, building email-centric narrative experiences for enterprise customers. You will implement end-to-end features spanning backend APIs to React-based UIs that explain Abnormal detections.

What you'll do

• Design and implement full-stack features across Threat Narrative and Email Details surfaces.
• Build and evolve APIs/services that generate enriched narratives from attack data and GenAI/LLM agents.
• Contribute to data models and explainability contracts for customer and analyst understanding.
• Write and maintain well-tested Python/Django backend and React/TypeScript frontend code.
• Support SLAs/SLOs, observability, and incident response via dashboards, alerts, and runbooks.
• Collaborate with Product, CS, GTM, Threat Intel, Detection, and DS partners on narrative context and outcomes.

What you'll need

• 2+ years of professional, production-level software engineering experience.
• Proficiency in Python and Django (or similar backend framework).
• Comfort working with Postgres or similar relational databases.
• Experience building frontend applications with React and TypeScript.
• Ability to design well-structured APIs and data models for data-intensive applications.
• Experience using metrics, logging, and tracing to debug production issues.
• Ability to collaborate effectively with Product and partner engineering teams.

Nice to have

• Experience integrating LLM/GenAI-powered features in production or pre-production systems.
• Familiarity with cybersecurity data, threat intelligence, or detection systems for email/collaboration security.
• Exposure to big data and batch processing technologies (Spark, Databricks, Airflow, Kafka).
• Experience on multi-team initiatives involving shared components, data contracts, or cross-surface UX.

Details

• Work location: Remote (USA).