Backend Architect (Python, Security platform)

What You Will Do

• Own the architecture: access control, secrets, certificates, migrations, deployment and the move toward multi-tenancy
• Own testing: CI, automated access-control tests, log-pipeline health checks, detection tests and release sign-off
• Build human-approved response automation (firewall blocking, host isolation) with safety limits and rollback
• Act as the final technical escalation for platform incidents and take part in the on-call rota
• Review code and mentor the engineers who join the team
• Build defences from the attacker's view: threat modelling, vulnerability management and hardening, including against AI-driven attacks
• Desired Candidate Profile 8+ years of software engineering, with a Python backend you took to production and operated
• Experience guiding other engineers through design and code review
• Strong in FastAPI or a similar framework, SQLAlchemy, PostgreSQL, Docker and Linux
• Real experience with authentication and access control (JWT, OIDC, LDAP/AD, MFA, role-based access)
• A testing mindset: CI, automated tests, and the discipline to stop a release that is not ready
• Good knowledge of attack techniques (MITRE ATT&CK), vulnerabilities (CVE / OWASP), defence methods and threat hunting
• Familiarity with red-teaming tools (Atomic Red Team, Caldera, Burp Suite, Metasploit) and the traces they leave
• Understanding of how AI is used in attacks and red teaming (AI-written phishing, deepfakes, prompt injection, LLM red-teaming), and how to build AI features safely
• Strong written and verbal English skills

Nice to Have

• Security-product or SOC experience (Wazuh, OpenSearch, Graylog, SIEM)
• Multi-tenant SaaS and Kubernetes
• PKI / OpenSSL and secrets management
• Threathunting experience