{"id":142743,"url":"https://alion.io/job/cyble-backend-engineer-architect","title":"Backend Engineer / Architect","company":{"id":2698,"name":"Cyble","domain":"cyble.com","url":"https://alion.io/company/cyble","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Work at a Startup","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6000000,"max":10000000,"currency":"INR","period":"year","gross":null,"usd_annual":105620},"salary_estimate":null,"experience_years_min":11,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Kafka","optional":false},{"name":"Apache Pulsar","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"gRPC","optional":false},{"name":"Incident Management","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"MySQL","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PostgreSQL","optional":false},{"name":"RabbitMQ","optional":false},{"name":"Redis","optional":false},{"name":"Rest API","optional":false},{"name":"Spring Boot","optional":false},{"name":"Spring Framework","optional":false},{"name":"ElasticSearch","optional":true},{"name":"Embeddings","optional":true},{"name":"Flink","optional":true},{"name":"Grafana","optional":true},{"name":"Linux","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NLP","optional":true},{"name":"OpenSearch","optional":true},{"name":"OpenTelemetry","optional":true},{"name":"Prometheus","optional":true},{"name":"RAG","optional":true},{"name":"SIEM","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-08-28T03:01:39Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-16T11:16:30Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"About the Role\nWe are seeking an experienced and passionate Backend Engineer / Architect to join our EDR / XDR Platform Engineering team. The ideal candidate has strong expertise in Java and Spring Boot, distributed systems, and event-driven architecture, with the ability to design and operate high-throughput services that ingest, process, and act on endpoint telemetry at scale.\nYou will help build and evolve the cloud backend that powers our EDR / XDR platform - the services that ingest millions of agent events, run real-time threat detection, manage agent lifecycle and command-and-control, and orchestrate automated response across enterprise endpoints. This is a multi-tenant, cloud-native SaaS platform built on modern, event-driven microservices. As an AI-first company, we expect you to actively leverage AI to sharpen detection, correlation, and engineering productivity.\nYou will work closely with agent (endpoint) engineers, security researchers, and product teams to translate detection use cases into reliable, scalable, and secure backend capabilities - from streaming telemetry pipelines and the detection layer to incident management and response orchestration.\nWhat You’ll Do at Cyble:\nDesign, develop, and enhance backend services and APIs for our EDR / XDR platform.\nBuild and maintain high-throughput data pipelines that ingest and process large volumes of endpoint telemetry in real time.\nContribute to the detection and analytics layer that turns telemetry into actionable security insights and incidents.\nDevelop services that power incident management, alerting, and automated response workflows.\nBuild platform services that support endpoint agent connectivity, lifecycle, and secure communication.\nDesign and optimize data models, storage, and caching for performance, scale, and reliability.\nDefine clean, well-structured service interfaces and integrations across the platform.\nImplement multi-tenancy, authentication, authorization, and data isolation with a strong security-first mindset.\nEnsure the scalability, reliability, and observability of backend services under heavy production load.\nWrite automated tests, participate in code reviews, and contribute to CI/CD and deployment practices.\nCollaborate closely with cross-functional teams - Agent Engineers, Security Analysts, Product, QA, and Threat Intelligence - to deliver robust capabilities.\nDebug and resolve complex production issues across distributed services.\nWhat You’ll Need:\nA minimum 10 years of relevant experience\nStrong proficiency in Java and the Spring / Spring Boot ecosystem, including concurrency, multithreading, and synchronization.\nSolid experience designing and building microservices and distributed systems.\nHands-on experience with event streaming / messaging - Apache Kafka (preferred), or similar (Pulsar, RabbitMQ) - including consumer scaling and delivery semantics.\nStrong data layer skills - NoSQL (MongoDB) and relational databases (PostgreSQL/MySQL), schema/data modeling, and query optimization.\nExperience with caching and in-memory stores (Redis), and an understanding of cache consistency trade-offs.\nProficiency designing REST APIs; working knowledge of Protobuf and gRPC.\nSolid grasp of application security: authentication, authorization, JWT, API keys, TLS/mTLS, and secure handling of secrets.\nExperience with containerization and orchestration (Docker, Kubernetes) and a major cloud provider (AWS preferred).\nStrong debugging, profiling, and performance-tuning skills for high-throughput services.\nWorking ability to apply AI in backend engineering - comfortable using AI/ML and LLM-based tools and APIs to build and improve logic such as correlation, detection, anomaly identification, enrichment, and automation.\nUnderstanding of endpoint security concepts and EDR/XDR product behavior.\nBonus Points If You Have:\nExperience building security products - EDR / XDR / SIEM / SOAR / AV / threat intelligence platforms.\nDetection engineering experience: Sigma rules, correlation, behavioral analytics, or streaming detection.\nFamiliarity with the MITRE ATT&CK framework and threat-intelligence enrichment.\nExperience with search/analytics stores (Elasticsearch / OpenSearch) for security telemetry.\nExperience with stream processing frameworks (Kafka Streams, Flink) and large-scale data pipelines.\nFamiliarity with observability tooling (Prometheus, Grafana, OpenTelemetry) and SRE practices.\nStrong AI / ML expertise - designing and building correlation, detection, or anomaly-detection models, and applying NLP / LLMs, embeddings / RAG, and ML pipelines to security data at scale.\nExposure to LLM / AI-assisted security workflows (alert triage, summarization, RAG) and integrating AI into production services.\nFamiliarity with agent (endpoint) architecture on Windows, Linux, or macOS.\nWhat We Offer:\nImpactful Work: Shape the core backend of a next-gen AI-based EDR / XDR platform protecting enterprises worldwide.\nCollaborative Culture: A dynamic and collaborative work environment.\nGrowth & Learning: Access to training budgets, conference support, and mentorship.\nApply now to join Cyble's EDR engineering team and help deliver game-changing security capabilities.\nIf you like working in an inclusive environment, you want to advance your career quickly, and your opinion is valued, look no further than Cyble, Inc. We are young, hungry, and ready to impact the cyber security landscape!\nCyble, Inc. takes into consideration an individual’s skillset, experience and location in making final salary determination.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected Veteran status age, or genetics, or any other characteristic protected by law.\nCV Shortlist by the Hiring Panel\n\nCognitive Assessment via a platform called Xobin - It’s a 50-minute assessment, which is a mandatory step in our recruitment process for all roles.\n\nPanel Discussions - Typically comprising a minimum of three interview rounds, along with a role-based assignment.","description_format":"text","description_chars":6123,"description_truncated":false,"requirements":{"experience_years_min":11,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-08-28T03:01:39Z"}],"visa":[],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.72,"p_room":0.55,"age_days":49,"expected_fill_days":49,"reasons":["conf:3","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":105620,"is_top_pay":false},"html_url":"https://alion.io/job/cyble-backend-engineer-architect","json_url":"https://alion.io/job/cyble-backend-engineer-architect.json","meta":{"generated_at":"2026-10-16T11:22:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10134,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2698},"rest":"https://alion.io/mcp/rest/get_company?id=2698"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcyble-backend-engineer-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcyble-backend-engineer-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcyble-backend-engineer-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cyble-backend-engineer-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcyble-backend-engineer-architect"}]}